CVE-2026-100574

The OpenClaw npm package (openclaw ) versions prior to 2026.8.1 is vulnerable to a server-side request forgery (SSRF) due to a flaw in its trusted-host DNS checks . Specifically, when using trusted-host DNS recheck, a trusted hostname that resolves to an unspecified address (such as 0.0.0.0 or ::...