PT-2026-26401 · Openclaw · Openclaw

Tdjackey · Published 2026-03-19 · Updated 2026-03-19 · CVE-2026-32020

NVD

CVSS v3.1

3.3

Low

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

OpenClaw versions prior to 2026.2.22 contain a path traversal vulnerability in the static file handler that follows symbolic links, allowing out-of-root file reads. Attackers can place symlinks under the Control UI root directory to bypass directory confinement checks and read arbitrary files outside the intended root.

Fix

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

CVE-2026-32020

Affected Products

Openclaw

References · 4

• https://github.com/openclaw/openclaw/commit/7c500ff6236fa087ec1ec88696ca9f6881e90dc5 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-32020 · Security Note
• https://github.com/openclaw/openclaw/security/advisories/GHSA-5ghc-98wh-gwwf · Note
• https://vulncheck.com/advisories/openclaw-arbitrary-file-read-via-symlink-following-in-static-file-handler · Note