OpenClaw has web_search citation redirect SSRF via private-network-allowing policy
### Summary Gemini `web_search` citation redirect resolution used a private-network-allowing SSRF policy. A citation URL redirect could target loopback/private/internal destinations and be fetched by the gateway. ### Impact An attacker who can influence citation redirect targets could trigger internal-network requests from the OpenClaw host. ### Fix Citation redirect resolution now uses strict/default SSRF policy (no private-network override), blocking localhost/private/internal redirect targets. ### Affected and Patched Versions - Affected: `<= 2026.2.26` - Patched: `2026.3.1`
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-31989US | medium6.3 | — | ||
OpenClaw versions prior to 2026.3.1 contain a server-side request forgery vulnerability in web_search citation redirect resolution that uses a private-network-allowing SSRF policy.… | ||||
references
External citations — patches, advisories, analysis.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan