CVE-2026-32019 in OpenClawinformação

Sumário

de MITRE • 20/03/2026

OpenClaw versions prior to 2026.2.22 contain incomplete IPv4 special-use range validation in the isPrivateIpv4() function, allowing requests to RFC-reserved ranges to bypass SSRF policy checks. Attackers with network reachability to special-use IPv4 ranges can exploit web_fetch functionality to access blocked addresses such as 198.18.0.0/15 and other non-global ranges.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsável

VulnCheck

Reservar

10/03/2026

Divulgação

20/03/2026

Moderação

aceite

Entrada

VDB-351967

CPE

pronto

EPSS

0.00050

KEV

não

Atividades

muito baixo

Sector

Industry, Energy, ...

Fontes

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-32019
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-32019
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-32019/

◂ VoltarVisão GeralPróximo ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!