Description
OpenClaw versions prior to 2026.2.25 contain a symlink traversal vulnerability in the agents.files.get and agents.files.set methods that allows reading and writing files outside the agent workspace. Attackers can exploit symlinked allowlisted files to access arbitrary host files within gateway process permissions, potentially enabling code execution through file overwrite attacks.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OpenClaw | OpenClaw | < 2026.2.25 | 2026.2.25 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 1 repository
-
hargabyte/cve-scanner ★ 3 · Mar 29, 2026
OpenClaw CVE scanner. Tracks known vulnerabilities (CVE-2026-32013, CVE-2026-32015, etc.). Zero network calls, 100% local. Version checking, upgrade recommendations.
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | openclaw | < 2026.2.25 | 2026.2.25 | GHSA-fgvx-58p6-gjwc |
Advisories 1
- WID-SEC-2026-0542 OpenClaw: Mehrere Schwachstellen BSI CERT-Bund (WID) · Apr 12, 2026
References
- GitHub Security Advisory (GHSA-fgvx-58p6-gjwc) vendor-advisory
- Patch Commit patch
- VulnCheck Advisory: OpenClaw < 2026.2.25 - Symlink Traversal in agents.files Methods third-party-advisory