EUVD-2026-17441PublishedWithdrawn
OpenClaw < 2026.3.24 - Arbitrary File Read via mediaUrl and fileUrl Parameters
Related advisories and sources
Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.
CVE-2026-33581 · CVE overview and exploitation status
cve-program · CVE-2026-33581
- https://github.com/openclaw/openclaw/security/advisories/GHSA-v8wv-jg3q-qwpq
- https://github.com/openclaw/openclaw/commit/1d7cb6fc03552bbba00e7cffb3aa9741f5556416
- https://www.vulncheck.com/advisories/openclaw-arbitrary-file-read-via-mediaurl-and-fileurl-parameters
euvd · EUVD-2026-17441
- https://github.com/openclaw/openclaw/security/advisories/GHSA-v8wv-jg3q-qwpq
- https://github.com/openclaw/openclaw/commit/1d7cb6fc03552bbba00e7cffb3aa9741f5556416
- https://www.vulncheck.com/advisories/openclaw-arbitrary-file-read-via-mediaurl-and-fileurl-parameters
nvd · CVE-2026-33581
- https://github.com/openclaw/openclaw/commit/1d7cb6fc03552bbba00e7cffb3aa9741f5556416
- https://github.com/openclaw/openclaw/security/advisories/GHSA-v8wv-jg3q-qwpq
- https://www.vulncheck.com/advisories/openclaw-arbitrary-file-read-via-mediaurl-and-fileurl-parameters
osv · GHSA-3gr8-2752-h46q
- https://github.com/openclaw/openclaw/security/advisories/GHSA-v8wv-jg3q-qwpq
- https://nvd.nist.gov/vuln/detail/CVE-2026-33581
- https://github.com/openclaw/openclaw/commit/1d7cb6fc03552bbba00e7cffb3aa9741f5556416
- https://www.vulncheck.com/advisories/openclaw-arbitrary-file-read-via-mediaurl-and-fileurl-parameters
osv · GHSA-v8wv-jg3q-qwpq
- https://github.com/openclaw/openclaw/security/advisories/GHSA-v8wv-jg3q-qwpq
- https://nvd.nist.gov/vuln/detail/CVE-2026-33581
- https://github.com/openclaw/openclaw/commit/1d7cb6fc03552bbba00e7cffb3aa9741f5556416
- https://github.com/openclaw/openclaw
- https://www.vulncheck.com/advisories/openclaw-arbitrary-file-read-via-mediaurl-and-fileurl-parameters
Related changes
Linked by CVE identifierNo related changes are available here.