The vulnerability is a server‑side request forgery in the canvas.present capability of OpenClaw Windows Node. It bypasses URL risk checks enforced by canvas.navigate and can be triggered by an attacker with gateway or agent access to make the node's WebView send arbitrary requests. This enables access to localhost, private network services, or tailnet services on the user’s machine, potentially exposing internal resources or allowing further compromise. The weakness is classified as CWE‑918.

Affected systems include any installation of OpenClaw Windows Node up through version 2026.9.4. The advisory references code used in versions 0.6.12 and 2026.9.4, suggesting earlier releases are impacted as well. Users running those releases should verify whether they have the vulnerable canvas.present implementation.

The CVSS score of 5.3 indicates moderate risk, and the EPSS score is not available. The exploit is not listed in CISA KEV, implying no known public exploits yet. Attackers would need gateway or agent level access; once achieved, they can invoke canvas.present to direct the WebView to perform internal or private network requests. The risk remains limited to compromised local agents or gateways but could lead to internal resource disclosure.