PT-2026-26414 · Openclaw · Openclaw

Tdjackey · Published 2026-03-03 · Updated 2026-03-20 · CVE-2026-32033

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.2.24

Description OpenClaw versions prior to 2026.2.24 contain a path traversal vulnerability. Absolute paths with a '@' prefix bypass workspace-only file-system boundary validation due to a canonicalization mismatch. Attackers can exploit this by crafting @-prefixed paths, such as @/etc/passwd, to read files outside the intended workspace boundary when tools.fs.workspaceOnly is enabled. The issue occurs because certain @-prefixed absolute paths are validated before canonicalization, while runtime path handling normalizes the prefix differently, allowing reads outside the intended workspace boundary.

Recommendations Update OpenClaw to version 2026.2.24 or later.

Fix

Path traversal

Weakness Enumeration

CWE-180

CWE-22

Related Identifiers

CVE-2026-32033

GHSA-27CR-4P5M-74RJ

Affected Products

Openclaw

References · 8

• https://github.com/openclaw/openclaw/commit/9ef0fc2ff8fa7b145d1e746d6eb030b1bf692260 · Patch
• https://github.com/openclaw/openclaw/security/advisories/GHSA-27cr-4p5m-74rj · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-32033 · Security Note
• https://osv.dev/vulnerability/GHSA-27cr-4p5m-74rj · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-32033 · Vendor Advisory
• https://github.com/openclaw/openclaw · Note
• https://vulncheck.com/advisories/openclaw-path-traversal-via-prefixed-absolute-paths-in-workspace-boundary-validation · Note
• https://twitter.com/CVEnew/status/2034891583619829813 · Twitter Post