{"id":"EUVD-2026-21120","enisaUuid":"fb727b44-2943-381d-8ba4-6b85f6d0cb61","description":"OpenClaw before 2026.3.24 contains a symlink traversal vulnerability in agents.create and agents.update handlers that use fs.appendFile on IDENTITY.md without symlink containment checks. Attackers with workspace access can plant symlinks to append attacker-controlled content to arbitrary files, enabling remote code execution via crontab injection or unauthorized access via SSH key manipulation.","datePublished":"Apr 9, 2026, 9:27:02 PM","dateUpdated":"Oct 29, 2026, 9:15:37 PM","baseScore":6.9,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N","references":"https://github.com/openclaw/openclaw/security/advisories/GHSA-7xr2-q9vf-x4r5\nhttps://www.vulncheck.com/advisories/openclaw-symlink-traversal-via-identity-md-appendfile-in-agents-create-update\n","aliases":"CVE-2026-35632\nGHSA-pmf3-2q63-jmp6\n","assigner":"VulnCheck","epss":0.42,"enisaIdProduct":[{"id":"52ac9bf9-0491-337a-bc2a-f8bb275d82b8","product":{"name":"OpenClaw","vendor":{"name":"n/a"}},"product_version":"0 \u003c2026.3.24"}],"enisaIdVendor":[{"id":"9d694990-7b39-3044-8a6b-43f0a0bcff61","vendor":{"name":"OpenClaw"}}],"enisaIdVulnerability":[{"id":"a75f4a50-e898-3662-9d1e-da3d38f0a3e1","vulnerability":{"id":"GHSA-7xr2-q9vf-x4r5","description":"OpenClaw: Symlink Traversal via IDENTITY.md appendFile in agents.create/update (Incomplete Fix for CVE-2026-32013)","datePublished":"Mar 26, 2026, 9:49:25 PM","dateUpdated":"Apr 18, 2026, 12:43:06 AM","baseScore":0.0,"references":"https://github.com/openclaw/openclaw/security/advisories/GHSA-7xr2-q9vf-x4r5\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-35632\nhttps://github.com/advisories/GHSA-fgvx-58p6-gjwc\nhttps://github.com/openclaw/openclaw\nhttps://github.com/openclaw/openclaw/blob/main/src/gateway/server-methods/agents.ts#L274\nhttps://github.com/openclaw/openclaw/blob/main/src/gateway/server-methods/agents.ts#L283-L291\nhttps://github.com/openclaw/openclaw/blob/main/src/gateway/server-methods/agents.ts#L348-L349\nhttps://www.vulncheck.com/advisories/openclaw-symlink-traversal-via-identity-md-appendfile-in-agents-create-update\n","enisa_id":"EUVD-2026-21120\n","aliases":"GHSA-7xr2-q9vf-x4r5\nCVE-2026-35632\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 1:58:58 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"b37e8928-e6cd-3ddc-8270-75950570505d","vulnerability":{"id":"CVE-2026-35632","description":"OpenClaw before 2026.3.24 contains a symlink traversal vulnerability in agents.create and agents.update handlers that use fs.appendFile on IDENTITY.md without symlink containment checks. Attackers with workspace access can plant symlinks to append attacker-controlled content to arbitrary files, enabling remote code execution via crontab injection or unauthorized access via SSH key manipulation.","datePublished":"Apr 9, 2026, 9:27:02 PM","dateUpdated":"Oct 29, 2026, 9:15:37 PM","status":"PUBLISHED","baseScore":6.9,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N","references":"https://github.com/openclaw/openclaw/security/advisories/GHSA-7xr2-q9vf-x4r5\nhttps://www.vulncheck.com/advisories/openclaw-symlink-traversal-via-identity-md-appendfile-in-agents-create-update\n","enisa_id":"EUVD-2026-21120\n","assigner":"VulnCheck","epss":0.42,"dataProcessed":"Nov 7, 2026, 7:22:35 AM","vulnerabilityProduct":[{"id":"f20e976f-cc6b-3e3c-a8a7-b38f63c086e8","product":{"name":"OpenClaw","vendor":{"name":"n/a"}},"product_version":"0 \u003c2026.3.24"}],"vulnerabilityVendor":[{"id":"e302102a-9301-306d-932d-65ca709e1e80","vendor":{"name":"OpenClaw"}}]}},{"id":"cc8052b4-a207-3fb9-a673-8628644c1967","vulnerability":{"id":"GHSA-pmf3-2q63-jmp6","description":"Duplicate Advisory: OpenClaw: Symlink Traversal via IDENTITY.md appendFile in agents.create/update (Incomplete Fix for CVE-2026-32013)","datePublished":"Apr 10, 2026, 12:30:30 AM","dateUpdated":"Apr 18, 2026, 12:42:18 AM","baseScore":0.0,"references":"https://github.com/openclaw/openclaw/security/advisories/GHSA-7xr2-q9vf-x4r5\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-35632\nhttps://www.vulncheck.com/advisories/openclaw-symlink-traversal-via-identity-md-appendfile-in-agents-create-update\n","enisa_id":"EUVD-2026-21120\n","aliases":"GHSA-pmf3-2q63-jmp6\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 1:59:37 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[{"id":"efbf7054-93c0-3093-9152-6d736d5ca1c5","advisory":{"id":"WID-SEC-W-2026-0542","description":"OpenClaw: Mehrere Schwachstellen","summary":"Ein Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um Dateien zu manipulieren, um Informationen offenzulegen, und um Sicherheitsvorkehrungen zu umgehen.","datePublished":"Feb 25, 2026, 11:00:00 PM","dateUpdated":"Apr 12, 2026, 10:00:00 PM","baseScore":0.0,"references":"https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0542.json\nhttps://wid.cert-bund.de/portal/wid/securityadvisory?name\u003dWID-SEC-2026-0542\n","aliases":"CVE-2026-28449\nCVE-2026-32005\nCVE-2026-32012\nCVE-2026-32013\nCVE-2026-32025\nCVE-2026-32028\nCVE-2026-32042\nCVE-2026-32043\nCVE-2026-32050\nCVE-2026-32054\nCVE-2026-32057\nCVE-2026-32065\nCVE-2026-32898\nCVE-2026-32899\nCVE-2026-35632\nCVE-2026-3691\n","source":{"id":8,"name":"csaf_certbund"},"advisoryProduct":[{"id":"043853dd-a52f-34c2-b545-3e4d05371f6f","product":{"name":"Open Source OpenClaw","vendor":{"name":"open source"}}}]}}]}