PT-2026-24945 · Openclaw · Openclaw

Nedlir · Publicado 2026-02-19 · Atualizado 2026-03-13 · CVE-2026-4040

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.2.19-beta.1

Description An issue exists in OpenClaw related to information disclosure within the tools.exec.safeBins function of the File Existence Handler component. Manipulation of this function can lead to information exposure through discrepancy, requiring local access for exploitation. The issue involves a file-existence oracle where command behavior differs based on whether a file exists on the host filesystem, allowing attackers to probe for file presence and potentially enumerate the filesystem.

Recommendations Upgrade to version 2026.2.19-beta.1 or later to address this issue.

Correção

Side Channel Attack

Information Disclosure

Enumeração de Fraquezas

CWE-203

CWE-200

Identificadores relacionados

CVE-2026-4040

GHSA-6C9J-X93C-RW6J

GHSA-XJJ9-2W6F-JG55

Produtos afetados

Openclaw

Referências · 14

• https://github.com/openclaw/openclaw · Nota
• https://github.com/openclaw/openclaw/commit/bafdbb6f112409a65decd3d4e7350fbd637c7754 · Correção
• https://github.com/openclaw/openclaw/releases/tag/v2026.2.19-beta.1 · Correção
• https://github.com/openclaw/openclaw/security/advisories/GHSA-6c9j-x93c-rw6j · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-xjj9-2w6f-jg55 · Aviso do Fabricante
• https://t.me/cveNotify/155254 · Publicação no Telegram
• https://vuldb.com/?submit.769581 · Nota
• https://vuldb.com/?id.350652 · Nota
• https://osv.dev/vulnerability/GHSA-6c9j-x93c-rw6j · Aviso do Fabricante
• https://t.me/CVEtracker/47252 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2026-4040 · Nota de Segurança
• https://vuldb.com/?ctiid.350652 · Nota
• https://twitter.com/CVEnew/status/2032410967213261290 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2026-4040 · Aviso do Fabricante