PT-2026-20962 · Openclaw · Openclaw

Locus-X64 · Published 2026-02-18 · Updated 2026-02-20 · CVE-2026-26972

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenClaw versions 2026.1.12 through 2026.2.12

Description OpenClaw browser download helpers accepted an unsanitized output path. When invoked via the browser control gateway routes, this allowed path traversal, enabling writes outside the intended OpenClaw temp downloads directory. The issue is not exposed via the AI agent tool schema. Exploitation requires authenticated CLI access or an authenticated gateway RPC token. The affected code is located in src/browser/pw-tools-core.downloads.ts within the waitForDownloadViaPlaywright and downloadViaPlaywright functions. The API endpoints /wait/download and /download are affected, specifically the path parameter.

Recommendations Upgrade to OpenClaw version 2026.2.13 or later.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-26972

GHSA-XWJM-J929-XQ7C

Affected Products

Openclaw

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/26xxx/CVE-2026-26972.json · Exploit
• https://github.com/openclaw/openclaw/commit/7f0489e4731c8d965d78d6eac4a60312e46a9426 · Patch
• https://github.com/openclaw/openclaw/security/advisories/GHSA-xwjm-j929-xq7c · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-xwjm-j929-xq7c · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-26972 · Security Note
• https://osv.dev/vulnerability/CVE-2026-26972 · Vendor Advisory
• https://github.com/openclaw/openclaw · Note
• https://github.com/openclaw/openclaw/releases/tag/v2026.2.13 · Note