PT-2026-26737 · Openclaw · Openclaw

Tdjackey · Published 2026-03-12 · Updated 2026-03-21 · CVE-2026-32055

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.2.26

Description OpenClaw contains a path traversal issue in workspace boundary validation. This allows attackers to write files outside the designated workspace by utilizing in-workspace symbolic links that point to non-existent targets outside the root directory. The boundary check incorrectly resolves aliases, enabling the initial write operation to bypass the workspace boundary and create files in arbitrary locations.

Recommendations Update OpenClaw to version 2026.2.26 or later.

Fix

Link Following

Path traversal

Weakness Enumeration

CWE-59

CWE-22

Related Identifiers

CVE-2026-32055

GHSA-9F79-7PW8-3FJ8

GHSA-MGRQ-9F93-WPP5

Affected Products

Openclaw

References · 12

• https://github.com/openclaw/openclaw/commit/46eba86b45e9db05b7b792e914c4fe0de1b40a23 · Patch
• https://github.com/openclaw/openclaw/commit/1aef45bc060b28a0af45a67dc66acd36aef763c9 · Patch
• https://github.com/openclaw/openclaw/security/advisories/GHSA-mgrq-9f93-wpp5 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-9f79-7pw8-3fj8 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-32055 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-32055 · Security Note
• https://osv.dev/vulnerability/GHSA-mgrq-9f93-wpp5 · Vendor Advisory
• https://github.com/openclaw/openclaw · Note
• https://twitter.com/RedPacketSec/status/2035383643967770727 · Twitter Post
• https://twitter.com/infoflowcloud/status/2035239123338813749 · Twitter Post
• https://twitter.com/CVEnew/status/2035237333239570739 · Twitter Post
• https://vulncheck.com/advisories/openclaw-workspace-path-boundary-bypass-via-non-existent-symlink · Note