Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.8

OpenClaw can let attackers read host temporary files

CVE-2026-32026 · published 7 months ago
Summary

Versions of OpenClaw before the 2026.2.24 release may let a malicious user request files from the host's temporary folder and retrieve them. This could expose sensitive information stored in that location. Upgrade OpenClaw to the 2026.2.24 version or later to close the gap.

What to do
  • Update GitHub Actions openclaw to version 2026.2.24.
  • Update steipete openclaw to version 2026.2.24.
  • Update openclaw openclaw to version 2026.2.24 or later.
Affected software
Ecosystem VendorProductAffected versions
npm GitHub Actions openclaw <= 2026.2.23
Fix: upgrade to 2026.2.24
npm steipete openclaw <= 2026.2.23
Fix: upgrade to 2026.2.24
– openclaw openclaw < 2026.2.24
cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*
Original advisory text
OpenClaw < 2026.2.24 - Arbitrary File Read via Improper Temporary Path Validation in Sandbox
OpenClaw versions prior to 2026.2.24 contain an improper path validation vulnerability in sandbox media handling that allows absolute paths under the host temporary directory outside the active sandbox root. Attackers can exploit this by providing malicious media references to read and exfiltrate arbitrary files from the host temporary directory through attachment delivery mechanisms.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
7.8 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-22Path Traversal
CWE-284Improper Access Control
Timeline
Published19 Mar 2026
Updated21 Oct 2026
First seen6 Mar 2026
Sources
GHSA-33hm-cq8r-wc49 · GHSA
CVE-2026-32026 · OSV
Track software like this
Free during beta