PT-2026-23534 · Openclaw · Openclaw

Oleh Konko · Published 2026-03-02 · Updated 2026-03-07 · CVE-2026-28457

Positive Technologies (AI Summary)

CVSS v3.1

7.9

High

Base vector

AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.2.14

Description The software contains a path traversal issue in sandbox skill mirroring when the skill frontmatter name parameter is used without proper sanitization during skill copying into the sandbox workspace. An attacker can provide a specially crafted skill package with traversal sequences, such as '../' or absolute paths, within the name field to write files outside the designated sandbox workspace root directory. This could allow writing files within the permissions of the user running OpenClaw. The issue requires the attacker to provide a skill package and the victim to have sandbox mode enabled with skill mirroring active.

Recommendations Update to version 2026.2.14 or later.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-28457

GHSA-XW4P-PW82-HQR7

Affected Products

Openclaw

References · 8

• https://github.com/openclaw/openclaw/commit/3eb6a31b6fcf8268456988bfa8e3637d373438c2 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-28457 · Security Note
• https://osv.dev/vulnerability/CVE-2026-28457 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-xw4p-pw82-hqr7 · Vendor Advisory
• https://github.com/openclaw/openclaw · Note
• https://github.com/openclaw/openclaw/security/advisories/GHSA-xw4p-pw82-hqr7 · Vendor Advisory, Patch
• https://vulncheck.com/advisories/openclaw-path-traversal-in-sandbox-skill-mirroring-via-name-parameter · Note
• https://twitter.com/CVEnew/status/2030385187977039927 · Twitter Post