Skip to content
Submit incident
AII-1001-11619
ConfirmedA court, a regulator or the organization itself has stated the core facts, or the record cites a court or regulator source.

OpenClaw cron webhook delivery vulnerability CVE-2026-27488

OpenClaw's cron webhook delivery feature used fetch() directly without SSRF (Server-Side Request Forgery) policy checks, potentially allowing webhook targets to reach private or internal endpoints. The vulnerability was patched in version 2026.2.18.

20 February 2026 Β· OpenClaw Β· Security and cyberattacks
20 February 2026

Drafted by Raidu Incident Detection, an automated system.

AII-1001-11619View source β†—
Quick facts
Category
Security and cyberattacks
Source
github.com
Date
20 February 2026
Drafted by
Raidu Incident Detection

What happened

Cron webhook delivery in OpenClaw's src/gateway/server-cron.ts used fetch() directly without SSRF policy checks.

Webhook targets could reach private, metadata, or internal endpoints without protection against Server-Side Request Forgery attacks.

Governance controls

The vulnerability was fixed by implementing SSRF-guarded outbound fetch protection (fetchWithSsrFGuard) to block private and metadata destinations before request dispatch.

Patched versions 2026.2.18 and later include the security hardening.

Classification

Category
Security and cyberattacks
Industry
IT infrastructure and hosting
Harm status
Potential harm
Intent
Unintentional
Timing
Post-deployment
Harmed
Business
Failure modes
Unsafe autonomous behaviour
AI systems
OpenClaw

Sources and evidence

This record was researched and written by the Index, based on the following original reporting.

github.com
https://github.com/openclaw/openclaw/security/advisories/GHSA-w45g-5746-x9fp
Aug 2026Claude AI agent discovers gym booking system vulnerability, cancels another user's reservationWell documentedSecurity and cyberattacksThe IndependentDiaspora Digital Media (DDM News) - Nigeria Breaking News, Africa and World News and Updates -The Indian Express+3Jun 2026Five malicious skills removed from OpenClaw ClawHub marketplaceConfirmedSecurity and cyberattacksUnit42Dark ReadingJun 2026OpenClaw AI agent vulnerabilities enable malicious skill packages to steal user dataUnder investigationSecurity and cyberattacksenglish.news.cnChina NewsApr 2026AI Agent Exploited Gym Booking API Authorization Flaw and Removed Member From WaitlistReportedSecurity and cyberattacksabc.net.auaffinda.comApr 2026Open-source AI agents expose security vulnerabilities in ChinaReportedSecurity and cyberattacksδΈœζ–Ήθ΄’ε―Œη½‘China News