GHSA-hggm-x7r9-mm7vPublished

OpenClaw is vulnerable to Path Traversal through path validation bypass

Exact source revision recorded 5 Nov 2026 21:36:37 UTC. It does not establish the source's current position. Latest evidence.

Recorded JSON

osv · GHSA-hggm-x7r9-mm7v

Published

OpenClaw through 2026.3.23 (fixed in commit 4797bbc) contains a path traversal vulnerability in media parsing that allows attackers to read arbitrary files by bypassing path validation in the isLikelyLocalPath() and isValidMedia() functions. Attackers can exploit incomplete validation and the allowBareFilename bypass to reference files outside the intended application sandbox, resulting in disclosure of sensitive information including system files, environment files, and SSH keys.

Source published: 26 Mar 2026 18:31:41 UTC
Source modified: 5 Nov 2026 21:00:08 UTC
Observed here: 5 Nov 2026 21:36:37 UTC
Source terms: GitHub Advisory Database · CC-BY-4.0

Original source record · Cite this exact observation · Complete original publisher JSON

This view projects the publisher's source fields for reading; the original JSON retains additional fields and CVE enrichment containers. Attribution: osv · GitHub Advisory Database · CC-BY-4.0. Source text is retained; field grouping and change labels are provided by ChangeIntel.

CVSS_V3 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS_V4 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Publisher rating · HIGH