PT-2026-26405 · Openclaw · Openclaw
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
OpenClaw versions prior to 2026.2.22
Description
OpenClaw contains a symlink traversal issue in its avatar handling functionality. This allows attackers to read arbitrary files outside the configured workspace boundary. Remote attackers can exploit this by requesting avatar resources through gateway surfaces, potentially disclosing local files accessible to the OpenClaw process. The issue involves local avatar resolution following symlinks, returning file bytes from outside the configured workspace. The vulnerability was addressed by enforcing canonical containment, using
O NOFOLLOW, and implementing file descriptor/file-identity checks during gateway avatar metadata resolution. Additionally, the control UI avatar serving now rejects symlink paths and enforces file descriptor/file-identity and size checks before reading files.Recommendations
Update OpenClaw to version 2026.2.22 or later.
Exploit
Correção
Link Following
Path traversal
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Openclaw