Description
OpenClaw is an npm-distributed gateway application. In versions >= 2026.7.1 and < 2026.8.1, Synology Chat attachment delivery could lose DNS pinning: the Gateway validated a single DNS result for a supplied file URL but then passed the original hostname to the Synology NAS, where it could resolve to a different destination. When attachment delivery accepted a remotely influenced hostname, an attacker could use DNS rebinding to make the NAS fetch a private or otherwise policy-denied resource and return its contents to the addressed conversation (server-side request forgery). Practical impact depends on NAS routing, resolver behavior, and the response available at the private destination. The issue is fixed in 2026.8.1; as a workaround, disable remote URL attachment forwarding in Synology Chat.
Published: 2026-09-26
Score: 7.1 High
EPSS: < 1% Very Low
KEV: No
Impact: Server‑side request forgery via DNS rebinding leading to private resource disclosure
Action: Apply Patch
AI Analysis

Impact

The OpenClaw gateway validates only a single DNS lookup for a supplied file URL but then passes the original hostname to a Synology NAS. This allows a DNS rebinding attack where the attacker can trick the NAS into fetching a private or otherwise blocked resource and delivering its contents to a Synology Chat conversation. The flaw enables a server‑side request forgery and could reveal internal network data or files, depending on how the NAS routes requests and resolves DNS names. The weakness is a classic DNS rebinding vulnerability (CWE‑918).

Affected Systems

Vulnerable OpenClaw gateway versions 2026.7.1 through 2026.7.9 when used with Synology Chat attachment delivery. The affected component is the OpenClaw application (OpenClaw gateway) that interacts with Synology NAS devices. The bug is fixed in OpenClaw 2026.8.1.

Risk and Exploitability

The CVSS score of 7.1 places this issue in the high severity range. EPSS information is unavailable, and the vulnerability is not listed in the CISA KEV catalog, so no current exploitation campaigns are documented. Nevertheless, the attack vector is remote, occurring through a legitimate attachment forwarding feature, and an attacker only needs a convincing URL to perform the rebinding. The practical impact depends on the NAS's DNS handling and internal routing, but the potential for confidential data exposure makes this a serious concern.

Generated by OpenCVE AI on September 26, 2026 at 04:36 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade the OpenClaw gateway to version 2026.8.1 or later to eliminate the DNS rebinding flaw.
  • As a temporary countermeasure, disable remote URL attachment forwarding in Synology Chat to block the vulnerable path.
  • Ensure that the Synology NAS is configured to enforce DNS pinning or to reject DNS responses that differ from a cached result, reducing the success window for rebinding attempts.

Generated by OpenCVE AI on September 26, 2026 at 04:36 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 05 Oct 2026 15:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Sat, 26 Sep 2026 02:30:00 +0000

Type Values Removed Values Added
Description OpenClaw is an npm-distributed gateway application. In versions >= 2026.7.1 and < 2026.8.1, Synology Chat attachment delivery could lose DNS pinning: the Gateway validated a single DNS result for a supplied file URL but then passed the original hostname to the Synology NAS, where it could resolve to a different destination. When attachment delivery accepted a remotely influenced hostname, an attacker could use DNS rebinding to make the NAS fetch a private or otherwise policy-denied resource and return its contents to the addressed conversation (server-side request forgery). Practical impact depends on NAS routing, resolver behavior, and the response available at the private destination. The issue is fixed in 2026.8.1; as a workaround, disable remote URL attachment forwarding in Synology Chat.
Title OpenClaw before 2026.8.1 DNS Rebinding via attachment delivery
First Time appeared Openclaw
Openclaw openclaw
Weaknesses CWE-918
CPEs cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:*
Vendors & Products Openclaw
Openclaw openclaw
References
Metrics cvssV3_1

{'score': 7.1, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N'}

cvssV4_0

{'score': 7.1, 'vector': 'CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:L/VA:N/SC:H/SI:L/SA:N'}

Subscriptions

Openclaw Openclaw
cve-icon MITRE

Status: PUBLISHED

Assigner: VulnCheck

Published:

Updated: 2026-10-05T14:55:03.826Z

Reserved: 2026-09-26T01:02:38.347Z

Link: CVE-2026-100555

cve-icon Vulnrichment

Updated: 2026-10-05T14:50:51.257Z

cve-icon NVD

Status : Deferred

Published: 2026-09-26T03:17:02.087

Modified: 2026-10-05T15:17:11.287

Link: CVE-2026-100555

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-26T07:45:06Z

Weaknesses
  • CWE-918

    Server-Side Request Forgery (SSRF)