Description
A vulnerability was identified in OpenClaw up to 2026.2.17. This issue affects the function tools.exec.safeBins of the component File Existence Handler. The manipulation leads to information exposure through discrepancy. The attack needs to be performed locally. Upgrading to version 2026.2.19-beta.1 is capable of addressing this issue. The identifier of the patch is bafdbb6f112409a65decd3d4e7350fbd637c7754. Upgrading the affected component is advised.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | OpenClaw | 2026.2.0, 2026.2.1, 2026.2.2, 2026.2.3, 2026.2.4, 2026.2.5, 2026.2.6, 2026.2.7, 2026.2.8, 2026.2.9, 2026.2.10, 2026.2.11, 2026.2.12, 2026.2.13, 2026.2.14, 2026.2.15, 2026.2.16, 2026.2.17 | 2026.2.19-beta.1 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
GitHub 1 repository
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | openclaw | < 2026.2.19 | 2026.2.19 | GHSA-6c9j-x93c-rw6j |
References
- VDB-350652 | OpenClaw File Existence tools.exec.safeBins information exposure vdb-entry technical-description
- VDB-350652 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- Submit #769581 | openclaw 2026.2.17 Information Disclosure third-party-advisory
- https://github.com/openclaw/openclaw/security/advisories/GHSA-6c9j-x93c-rw6j related
- https://github.com/openclaw/openclaw/commit/bafdbb6f112409a65decd3d4e7350fbd637c7754 patch
- https://github.com/openclaw/openclaw/releases/tag/v2026.2.19-beta.1 patch
- https://github.com/openclaw/openclaw/ product