https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 10:24:06 +0000 https://vulnerability.circl.lu/vuln/cve-2026-32037 <p><strong>Affected:</strong> OpenClaw</p> <p>OpenClaw versions prior to 2026.2.22 fail to consistently validate redirect chains against configured mediaAllowHosts allowlists during MSTeams media downloads. Attackers can supply or influence attachment URLs to force redirects to non-allowlisted targets, bypassing SSRF boundary controls.</p> <p><strong>Affected:</strong> OpenClaw</p> <p>OpenClaw versions prior to 2026.2.22 fail to consistently validate redirect chains against configured mediaAllowHosts allowlists during MSTeams media downloads. Attackers can supply or influence attachment URLs to force redirects to non-allowlisted targets, bypassing SSRF boundary controls.</p> https://vulnerability.circl.lu/vuln/cve-2026-32037 https://vulnerability.circl.lu/vuln/ghsa-w76h-8m22-hpgh <p><strong>Affected:</strong> npm: openclaw</p> <p>## Summary In OpenClaw MSTeams media download flows, redirect handling could bypass configured `mediaAllowHosts` checks in specific attachment paths. Redirect chains were not consistently constrained to allowlisted targets before accepting fetched content.</p> <p>## Affected Packages / Versions - Package: `openclaw` (npm) - Affected versions: `&lt;= 2026.2.21-2` (latest published at triage time) - Fixed in: `2026.2.22` (planned next release)</p> <p>## Impact Attackers able to supply or influence attachment URLs could force redirect chains to non-allowlisted targets, weakening SSRF boundary controls for MSTeams media ingestion.</p> <p>## Fix Commit(s) - `73d93dee64127a26f1acd09d0403b794cdeb4f5c` - `b34097f62df9d1960cc22600269cd3f3284e2124`</p> <p>## Release Process Note `patched_versions` is pre-set to the planned next release (`2026.2.22`). Once that npm release is published, this advisory can be published without further version-field edits.</p> <p>OpenClaw thanks @tdjackey for reporting.</p> <p><strong>Affected:</strong> npm: openclaw</p> <p>## Summary In OpenClaw MSTeams media download flows, redirect handling could bypass configured `mediaAllowHosts` checks in specific attachment paths. Redirect chains were not consistently constrained to allowlisted targets before accepting fetched content.</p> <p>## Affected Packages / Versions - Package: `openclaw` (npm) - Affected versions: `&lt;= 2026.2.21-2` (latest published at triage time) - Fixed in: `2026.2.22` (planned next release)</p> <p>## Impact Attackers able to supply or influence attachment URLs could force redirect chains to non-allowlisted targets, weakening SSRF boundary controls for MSTeams media ingestion.</p> <p>## Fix Commit(s) - `73d93dee64127a26f1acd09d0403b794cdeb4f5c` - `b34097f62df9d1960cc22600269cd3f3284e2124`</p> <p>## Release Process Note `patched_versions` is pre-set to the planned next release (`2026.2.22`). Once that npm release is published, this advisory can be published without further version-field edits.</p> <p>OpenClaw thanks @tdjackey for reporting.</p> https://vulnerability.circl.lu/vuln/ghsa-w76h-8m22-hpgh