PT-2026-26407 · Openclaw · Openclaw

Tdjackey · Published 2026-03-03 · Updated 2026-03-20 · CVE-2026-32026

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.2.24

Description OpenClaw contains an improper path validation issue in sandbox media handling. This allows absolute paths under the host temporary directory to bypass the active sandbox root. Attackers can exploit this by providing malicious media references to read and exfiltrate arbitrary files from the host temporary directory through attachment delivery mechanisms. The issue arises because sandbox media path resolution allowed absolute host temporary paths as trusted media inputs, even when those paths were outside the active sandboxRoot. This enabled out-of-sandbox host temporary file reads and exfiltration through attachment delivery. The vulnerability impacts confidentiality, particularly for deployments relying on sandboxRoot as a strict local filesystem boundary.

Recommendations Versions prior to 2026.2.24: Restrict sandbox temporary-path acceptance to OpenClaw-managed temp roots only. Versions prior to 2026.2.24: Default SDK/extension temp helpers to OpenClaw-managed temp roots. Versions prior to 2026.2.24: Add CI guardrails to prevent broad tmp-root regressions in messaging/channel code paths.

Fix

Path traversal

Improper Access Control

Weakness Enumeration

CWE-22

CWE-284

Related Identifiers

CVE-2026-32026

GHSA-33HM-CQ8R-WC49

Affected Products

Openclaw

References · 10

• https://github.com/openclaw/openclaw/commit/def993dbd843ff28f2b3bad5cc24603874ba9f1e · Patch
• https://github.com/openclaw/openclaw/commit/d3da67c7a9b463edc1a9b1c1f7af107a34ca32f5 · Patch
• https://github.com/openclaw/openclaw/commit/79a7b3d22ef92e36a4031093d80a0acb0d82f351 · Patch
• https://github.com/openclaw/openclaw/security/advisories/GHSA-33hm-cq8r-wc49 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-32026 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-33hm-cq8r-wc49 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-32026 · Security Note
• https://github.com/openclaw/openclaw · Note
• https://vulncheck.com/advisories/openclaw-arbitrary-file-read-via-improper-temporary-path-validation-in-sandbox · Note
• https://twitter.com/CVEnew/status/2034891590582342050 · Twitter Post