PT-2026-26011 · Openclaw · Openclaw

Tdjackey · Published 2026-03-02 · Updated 2026-03-18 · CVE-2026-22180

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.3.2

Description OpenClaw versions prior to 2026.3.2 contain a path-confinement bypass in browser output handling. This allows writes outside of intended root directories. Attackers can exploit insufficient canonical path-boundary validation in file write operations to bypass root-bound restrictions and write files to arbitrary locations. The issue involves insufficient validation of path boundaries during file write operations, enabling attackers to escape root-bound restrictions. The fix unifies root-bound, file-descriptor-verified write semantics and canonical path-boundary validation across browser output and related install/skills write paths.

Recommendations Update OpenClaw to version 2026.3.2 or later.

Fix

Link Following

Time Of Check To Time Of Use

Weakness Enumeration

CWE-59

CWE-367

Related Identifiers

BDU:2026-05077

CVE-2026-22180

GHSA-3PXQ-F3CP-JMXP

Affected Products

Openclaw

References · 11

• https://github.com/openclaw/openclaw/commit/104d32bb64cdf19d5e77f70553a511a2ae90ad1c · Patch
• https://github.com/openclaw/openclaw/security/advisories/GHSA-3pxq-f3cp-jmxp · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-3pxq-f3cp-jmxp · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-22180 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-05077 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-22180 · Security Note
• https://github.com/openclaw/openclaw · Note
• https://vulncheck.com/advisories/openclaw-path-confinement-bypass-in-browser-output-and-file-write-operations · Note
• https://twitter.com/VulmonFeeds/status/2034145289246777446 · Twitter Post
• https://twitter.com/CVEarity/status/2034322908835979438 · Twitter Post
• https://twitter.com/CVEnew/status/2034136427932295329 · Twitter Post