{"id":"CVE-2026-32846","revision":"3ba719c4065d43baab5e63ab949c512f","records":[{"revision":"3ba719c4065d43baab5e63ab949c512f","observedAt":"2026-10-25T07:19:26.892+00:00","statement":{"source":"nvd","id":"CVE-2026-32846","aliases":[],"title":"OpenClaw before 2026.3.28 contains a path traversal vulnerability in media parsing that allows attackers to read arbitrary files by bypassing path validation in the isLikelyLocalPath() and isValidMedia() functions. Attackers can exploit inc…","description":"OpenClaw before 2026.3.28 contains a path traversal vulnerability in media parsing that allows attackers to read arbitrary files by bypassing path validation in the isLikelyLocalPath() and isValidMedia() functions. Attackers can exploit incomplete validation and the allowBareFilename bypass to reference files outside the intended application sandbox, resulting in disclosure of sensitive information including system files, environment files, and SSH keys.","state":0,"publishedAt":"2026-03-26T17:16:37.64+00:00","modifiedAt":"2026-10-08T16:17:13.21+00:00","affected":[],"metrics":[{"system":"CVSS 4.0 · disclosure@vulncheck.com · Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","score":8.7,"severity":"HIGH"},{"system":"CVSS 3.1 · nvd@nist.gov · Primary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","score":7.5,"severity":"HIGH"}],"references":["https://github.com/openclaw/openclaw/commit/4797bbc5b96e2cca5532e43b58915c051746fe37","https://github.com/openclaw/openclaw/pull/54642","https://github.com/openclaw/openclaw/security/advisories/GHSA-f6pf-4gjx-c94r","https://www.vulncheck.com/advisories/openclaw-media-parsing-path-traversal-to-arbitrary-file-read"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-32846","license":"NIST NVD usage terms; underlying source attribution retained","enrichment":{"sourceStatus":"Modified","weaknesses":["CWE-22"],"productCriteria":["cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*"],"sourceDates":{"published":"2026-03-26T17:16:37.640","lastModified":"2026-10-08T16:17:13.210"},"relatedAdvisories":[],"note":"NVD analysis and CPE criteria are source context, not proof that a package or your environment is affected. Complete affected data, logical configurations and SSVC are retained in the original JSON."},"key":"nvd:CVE-2026-32846","identifiers":["CVE-2026-32846"]},"retained":false,"historicalAffected":[]}],"coverage":[]}