CVE-2026-6011
Published: 10 April 2026
Summary
CVE-2026-6011 is a low-severity SSRF (CWE-918) vulnerability in Openclaw Openclaw. Its CVSS base score is 2.9 (Low).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked at the 33.5th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
The strongest mitigations our analysis identified are NIST 800-53 AC-4 (Information Flow Enforcement) and SI-10 (Information Input Validation).
Deeper analysis
CVE-2026-6011 is a server-side request forgery (SSRF) vulnerability, classified under CWE-918, affecting OpenClaw versions up to and including 2026.1.26. The issue impacts certain functionality in the file src/agents/tools/web-fetch.ts, specifically within the assertPublicHostname handler component.
Remote attackers with no privileges or user interaction required can exploit this vulnerability, though it involves high complexity and is considered difficult to execute. Successful exploitation enables limited impacts on confidentiality, integrity, and availability, consistent with the CVSS v3.1 base score of 5.6 (AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L).
Advisories recommend upgrading to OpenClaw version 2026.1.29, which resolves the issue via commit b623557a2ec7e271bda003eb3ac33fbb2e218505. Additional details are documented in the OpenClaw GitHub repository, release notes, a dedicated vulnerability report, and related submissions.
An exploit for CVE-2026-6011 has been made publicly available and could be used for attacks.
OWASP Top 10 for Web (2025)
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2026-21306
Vulnerability details
A weakness has been identified in OpenClaw up to 2026.1.26. Affected by this issue is some unknown functionality of the file src/agents/tools/web-fetch.ts of the component assertPublicHostname Handler. Executing a manipulation can lead to server-side request forgery. The attack can be…
more
executed remotely. This attack is characterized by high complexity. The exploitation is known to be difficult. The exploit has been made available to the public and could be used for attacks. Upgrading to version 2026.1.29 can resolve this issue. This patch is called b623557a2ec7e271bda003eb3ac33fbb2e218505. Upgrading the affected component is advised.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
SSRF vulnerability in a remote-accessible server component (web-fetch tool) directly enables remote exploitation of a public-facing application without privileges or user interaction.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Directly mitigates the SSRF vulnerability by requiring timely patching to OpenClaw version 2026.1.29 via commit b623557a2ec7e271bda003eb3ac33fbb2e218505.
Validates inputs to the web-fetch.ts assertPublicHostname handler to block malicious URLs that enable server-side request forgery.
Enforces information flow policies restricting the web-fetch component from initiating unauthorized outbound requests to internal or external destinations.