1 matches found
OpenClaw has a IPv6 multicast SSRF classifier bypass
Summary OpenClaw's SSRF IP classifier did not treat IPv6 multicast literals ff00::/8 as blocked/private-internal. This allowed literal multicast hosts to pass SSRF preflight checks. Impact A bypass in address classification existed for IPv6 multicast literals. OpenClaw's network fetch/navigation...
5.9AI score
SaveExploits0References3Affected Software1
20