OpenClaw versions before 2026.8.1 contain a server-side request forgery flaw in browser wait predicates. The bug allows an attacker to use the wait --fn function on an existing browser session to issue requests to loopback or private IP addresses without the normal navigation checks that protect against internal traffic. This flaw qualifies as CWE‑918 and can lead to internal network reconnaissance or traversal of internal services.

All installations of OpenClaw running a version older than 2026.8.1 are affected. No specific operating system or platform limitations are noted; any environment where the affected OpenClaw instance runs and permits execution of the wait --fn command is vulnerable.

The CVSS score of 5.3 indicates a medium severity risk. EPSS data is unavailable, so the current likelihood of exploitation cannot be quantified. The flaw is not listed in the CISA KEV catalog. The likely attack vector is remote, requiring the attacker to invoke the vulnerable function on the server, either through an exposed API or a privileged user session. Once triggered, the attacker can reach otherwise blocked internal destinations, potentially exposing sensitive resources.