CVE-2026-43526 json
OpenClaw < 2026.4.12 - Server-Side Request Forgery via QQBot Reply Media URL Handling
published 6mo ago modified 4mo ago also GHSA-2767-2q9v-9326 , EUVD-2026-27263
- cvss
- 8.2
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.3%
- EPSS 0.3% chance of exploitation in 30 days, percentile 16%
- public exploits
- 0
- none known
Summary
OpenClaw before 2026.4.12 contains a server-side request forgery vulnerability in QQBot reply media URL handling that allows attackers to fetch arbitrary content. Attackers can exploit this by providing malicious media URLs that trigger SSRF requests, with fetched bytes subsequently re-uploaded through the channel.
Patch / fix
- npm openclaw 2026.4.12
- OpenClaw OpenClaw 2026.4.12
- github.com/openclaw/openclaw@08ae021 commit
- github.com/openclaw/openclaw@ddb7a8d commit
- github.com/openclaw/openclaw@08ae021 commit
- github.com/openclaw/openclaw#63495 pull request
- github.com/openclaw/openclaw#65788 pull request
Is CVE-2026-43526 in your dependencies? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.
Check with FencerCISA SSVC
- Exploitation
- none
- Automatable
- yes
- Technical impact
- partial
- Assessed
- 6mo ago
Exploit prediction
0.25% chance of exploitation in the next 30 days, higher than 16% of all scored CVEs (FIRST EPSS, 2026-11-09).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 4.0 | 8.3 | CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N |
| CNA | 3.1 | 8.2 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N |
| CNA | 4.0 | 8.3 | CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
| NVD | 3.1 | 9.3 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N |
| GitHub | 3.1 | 8.2 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| npm | openclaw | <2026.4.12 |
2026.4.12 |
Affected products
- OpenClaw OpenClaw
Classification
- Weakness
-
- CWE-918 Server-Side Request Forgery
References
-
github.com
/openclaw/openclaw/commit/08ae021d1f4f02e0ca5fd8a3b9659291c1ecf95a
patch, web
-
github.com
/openclaw/openclaw/commit/ddb7a8dd80b8d5dd04aafa44ce7a4354b568bb2d
patch, web
-
github.com
/openclaw/openclaw/pull/63495
web
-
github.com
/openclaw/openclaw/pull/65788
web
-
github.com
/openclaw/openclaw/commit/08ae021d1f42905a85a550813c0d95169b171a6c
web
-
github.com
/openclaw/openclaw/security/advisories/GHSA-2767-2q9v-9326
vendor-advisory, web
-
vulncheck.com
/advisories/openclaw-server-side-request-forgery-via-qqbot-reply-media-url-handling
third-party-advisory, web
-
nvd.nist.gov
/vuln/detail/CVE-2026-43526
advisory
-
github.com
/openclaw/openclaw
package
Sources
- CVE List CVE-2026-43526
- GitHub Advisory GHSA-2767-2q9v-9326
- NVD CVE-2026-43526
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.