A server‑side request forgery flaw exists in OpenClaw before version 2026.3.31 in the marketplace plugin download path. Because the marketplace.ts module does not limit where a redirect can point, an attacker can supply a URL that is redirected to an arbitrary internal or external server. The result is that the OpenClaw server, acting as an intermediary, will send requests to the attacker‑controlled target, leaking information about the internal network and possibly exposing services that should be internal only. The primary consequence is the compromise of confidentiality and potential lateral movement within the internal infrastructure.

The affected product is OpenClaw (OpenClaw) running on a Node.js environment, specifically all releases older than 2026.3.31. Users of these versions that enable the marketplace plugin download feature are vulnerable.

The CVSS score of 4.8 classifies the vulnerability as medium severity. No EPSS figure is available, and it is not listed in the CISA KEV catalog. The vulnerability appears exploitable over the network via the marketplace download redirect endpoint and does not require elevated privileges on the target application. Given the lack of evidence for widespread exploitation, the immediate risk is moderate, but any internal service reachable from the OpenClaw host remains susceptible to following the forged requests.