CVE-2026-27488 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

OpenClaw is a personal AI assistant. In versions 2026.2.17 and below, Cron webhook delivery in src/gateway/server-cron.ts uses fetch() directly, so webhook targ…
Medium CVSS: 6.9

CVE-2026-27488

OpenClaw is a personal AI assistant. In versions 2026.2.17 and below, Cron webhook delivery in src/gateway/server-cron.ts uses fetch() directly, so webhook targets can reach private/metadata/internal endpoints without SSRF policy checks. This issue was fixed in version 2026.2.19.
Vendor
Openclaw
Product
Openclaw
CWE
CWE-918
Yayın Tarihi
2026-02-21 10:16:13
Güncelleme
2026-02-23 20:41:07
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-918 Openclaw MEDIUM Openclaw 2026

Referanslar

https://github.com/openclaw/openclaw/commit/99db4d13e5c139883ef0def9ff963e9273179655 https://github.com/openclaw/openclaw/releases/tag/v2026.2.19 https://github.com/openclaw/openclaw/security/advisories/GHSA-w45g-5746-x9fp