r/node•
CYDEFI_Ltd

OpenClaw SSRF-Guard blocking Undici Proxy (EAI_AGAIN) - JS Hotfix needed

Hello everyone,

I'm running an OpenClaw agent inside a strict OpenShell zero-trust sandbox. The agent needs to reach an external API, but it crashes before the connection is established with: Agent exited with code 255. getaddrinfo EAI_AGAIN api.search.brave(dot)com

Based on NVIDIA GitHub issues (NemoClaw #396, OpenClaw #46306), this is a known bug from the GTC 2026 release.

The technical situation:

  1. OpenClaw's internal SSRF-Guard enforces local DNS resolution (DNS pinning) before handing the request over to the EnvHttpProxyAgent (Undici).
  2. Because the zero-trust sandbox blocks all local egress DNS requests, the SSRF check times out and crashes the agent. The proxy is never reached.
  3. Node.js/Undici completely ignores manual IP injections into the container's /etc/hosts file.

Since this cannot be fixed via network or firewall policies, I am looking for a temporary code-level workaround.

My Question: Has anyone successfully patched the Javascript files (e.g., dispatch.js) to temporarily disable the SSRF-Guard or force Undici to skip the local DNS lookup and resolve directly through the proxy? Any code snippets or hotfixes would be highly appreciated.

Posted Apr 5, 2026, 10:28 AM UTC

11
Loading comments…