PT-2026-26736 · Openclaw · Openclaw

Tdjackey · Published 2026-03-02 · Updated 2026-03-21 · CVE-2026-32054

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.2.25

Description The software contains a symlink traversal issue in how browser trace and download output paths are handled. This allows a local attacker to bypass the managed temporary directory. An attacker with local access can create symlinks to redirect file writes outside the intended temporary directory, potentially overwriting arbitrary files on the system.

Recommendations Update OpenClaw to version 2026.2.25 or later.

Fix

Link Following

Path traversal

Weakness Enumeration

CWE-59

CWE-22

Related Identifiers

CVE-2026-32054

GHSA-36H3-7C54-J27R

GHSA-FFR4-MRHV-VFR2

Affected Products

Openclaw

References · 10

• https://github.com/openclaw/openclaw/security/advisories/GHSA-36h3-7c54-j27r · Vendor Advisory
• https://github.com/openclaw/openclaw/commit/496a76c03ba85e15ea715e5a583e498ae04d36e3 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-32054 · Security Note
• https://osv.dev/vulnerability/GHSA-ffr4-mrhv-vfr2 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-36h3-7c54-j27r · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-32054 · Vendor Advisory
• https://github.com/openclaw/openclaw · Note
• https://vulncheck.com/advisories/openclaw-symlink-traversal-in-browser-trace-download-path-handling · Note
• https://twitter.com/infoflowcloud/status/2035239140480909645 · Twitter Post
• https://twitter.com/CVEnew/status/2035237334237716728 · Twitter Post