Description
OpenClaw versions 2026.4.7 before 2026.4.15 fail to enforce local-root containment on tool-result media paths, allowing arbitrary local and UNC file access. Attackers can craft malicious tool-result media references to trigger host-side file reads or Windows network path access, potentially disclosing sensitive files or exposing credentials.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OpenClaw | OpenClaw | 2026.4.7 – < 2026.4.15 | 2026.4.15 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | openclaw | >= 2026.4.7, < 2026.4.15 | 2026.4.15 | GHSA-mr34-9552-qr95 |
Advisories 1
- WID-SEC-2026-1161 OpenClaw: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 6, 2026
References
- GitHub Security Advisory (GHSA-mr34-9552-qr95) vendor-advisory
- Patch Commit patch
- Patch Commit patch
- Patch Commit patch
- https://www.vulncheck.com/advisories/openclaw-arbitrary-file-read-via-unvalidated-tool-result-media-paths third-party-advisory