Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.4

OpenClaw allows local user to overwrite any file

CVE-2026-32054 · published 7 months ago
Summary

Versions of OpenClaw released before 2026.2.25 let someone with access to the computer create shortcuts that cause the program to write files outside its safe temporary folder. This can be used to replace or modify any file on the system. Upgrade to version 2026.2.25 or later to stop the problem.

What to do
  • Update steipete openclaw to version 2026.2.25.
  • Update GitHub Actions openclaw to version 2026.2.25.
  • Update openclaw openclaw to version 2026.2.25 or later.
Affected software
Ecosystem VendorProductAffected versions
npm steipete openclaw < 2026.2.25
Fix: upgrade to 2026.2.25
– openclaw openclaw < 2026.2.25
cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*
npm GitHub Actions openclaw < 2026.2.25
Fix: upgrade to 2026.2.25
Original advisory text
OpenClaw < 2026.2.25 - Symlink Traversal in Browser Trace/Download Path Handling
OpenClaw versions prior to 2026.2.25 contain a symlink traversal vulnerability in browser trace and download output path handling that allows local attackers to escape the managed temp root directory. An attacker with local access can create symlinks to route file writes outside the intended temp directory, enabling arbitrary file overwrite on the affected system.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
7.4 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-22Path Traversal
CWE-59Link Following
Timeline
Published21 Mar 2026
Updated21 Oct 2026
First seen6 Mar 2026
Sources
GHSA-36h3-7c54-j27r · GHSA
CVE-2026-32054 · OSV
Track software like this
Free during beta