OpenClaw before 2026.3.31 contains a server-side request forgery vulnerability in the marketplace plugin download functionality that allows attackers to access …

OpenClaw versions before 2026.3.31 contain a server-side request forgery (SSRF) vulnerability in the marketplace plugin download functionality. The vulnerability exists in the marketplace.ts module which fails to properly validate redirect destinations during archive downloads. Remote attackers can exploit this flaw to access internal resources by manipulating redirects to point to arbitrary internal or external servers. This could potentially allow unauthorized access to internal network resources and sensitive data.