Critical severity · published May 5, 2026
CVE-2026-43526
OpenClaw < 2026.4.12 - Server-Side Request Forgery via QQBot Reply Media URL Handling
9.3
CVSS
0.3%
EPSS
No
On KEV
Description
OpenClaw before 2026.4.12 contains a server-side request forgery vulnerability in QQBot reply media URL handling that allows attackers to fetch arbitrary content. Attackers can exploit this by providing malicious media URLs that trigger SSRF requests, with fetched bytes subsequently re-uploaded through the channel.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
Low
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 16% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OP
OpenClaw · OpenClaw
before 2026.4.12 · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-43526
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-43526
Patch
https://github.com/openclaw/openclaw/commit/08ae021d1f4f02e0ca5fd8a3b9659291c1ecf95a
Patch
https://github.com/openclaw/openclaw/commit/ddb7a8dd80b8d5dd04aafa44ce7a4354b568bb2d
Vendor Advisory
https://github.com/openclaw/openclaw/security/advisories/GHSA-2767-2q9v-9326
Third Party Advisory
https://www.vulncheck.com/advisories/openclaw-server-side-request-forgery-via-qqbot-reply-media-url-handling
More from OpenClaw
9.9
CVE-2026-41329
OpenClaw < 2026.3.31 - Sandbox Bypass via Heartbeat Context Inheritance and senderIsOwner Escalation
9.9
CVE-2026-33579
OpenClaw < 2026.3.28 - Privilege Escalation via Missing Caller Scope Validation in Device Pair Approval
9.9
CVE-2026-32922
OpenClaw < 2026.3.11 - Privilege Escalation via Unvalidated Scope in device.token.rotate
9.9
CVE-2026-32048
OpenClaw < 2026.3.1 - Sandbox Escape via Cross-Agent sessions_spawn
9.9
CVE-2026-22172
OpenClaw < 2026.3.12 - Scope Elevation in WebSocket Shared-Auth Connections