Lucene search
+L

1 matches found

OSV
OSV
added 2026/03/03 9:48 p.m.20 views

GHSA-H97F-6PQJ-Q452 OpenClaw has a IPv6 multicast SSRF classifier bypass

Summary OpenClaw's SSRF IP classifier did not treat IPv6 multicast literals ff00::/8 as blocked/private-internal. This allowed literal multicast hosts to pass SSRF preflight checks. Impact A bypass in address classification existed for IPv6 multicast literals. OpenClaw's network fetch/navigation...

6.3CVSS5.9AI score
SaveExploits0References3
Rows per page
Query Builder