Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/03/03 9:48 p.m.12 views

OpenClaw has a IPv6 multicast SSRF classifier bypass

Summary OpenClaw's SSRF IP classifier did not treat IPv6 multicast literals ff00::/8 as blocked/private-internal. This allowed literal multicast hosts to pass SSRF preflight checks. Impact A bypass in address classification existed for IPv6 multicast literals. OpenClaw's network fetch/navigation...

5.9AI score
SaveExploits0References3Affected Software1
Rows per page
Query Builder