PT-2026-31767 · Openclaw · Openclaw

Edward-X · Published 2026-03-26 · Updated 2026-04-10 · CVE-2026-35632

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenClaw versions through 2026.2.22

Description OpenClaw through version 2026.2.22 has a symlink traversal issue in the agents.create and agents.update handlers. These handlers use fs.appendFile on IDENTITY.md without proper symlink containment checks. An attacker with workspace access can create symlinks to append content to arbitrary files. This can lead to remote code execution through crontab injection or unauthorized access via SSH key manipulation.

Recommendations Update OpenClaw to a version later than 2026.2.22.

Exploit

Fix

RCE

Weakness Enumeration

CWE-61

Related Identifiers

CVE-2026-35632

GHSA-7XR2-Q9VF-X4R5

GHSA-PMF3-2Q63-JMP6

Affected Products

Openclaw

References · 13

• 🔥 https://github.com/openclaw/openclaw/security/advisories/GHSA-7xr2-q9vf-x4r5 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-35632 · Security Note
• https://osv.dev/vulnerability/GHSA-pmf3-2q63-jmp6 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-7xr2-q9vf-x4r5 · Vendor Advisory
• https://github.com/openclaw/openclaw · Note
• https://github.com/openclaw/openclaw/blob/main/src/gateway/server-methods/agents.ts#L348-L349 · Note
• https://github.com/openclaw/openclaw/blob/main/src/gateway/server-methods/agents.ts#L283-L291 · Note
• https://github.com/openclaw/openclaw/blob/main/src/gateway/server-methods/agents.ts#L274 · Note
• https://twitter.com/CVEnew/status/2042387949132890133 · Twitter Post
• https://vulncheck.com/advisories/openclaw-symlink-traversal-via-identity-md-appendfile-in-agents-create-update · Note
• https://twitter.com/infoflowcloud/status/2042390003834052777 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2042472170345939368 · Twitter Post
• https://github.com/advisories/GHSA-fgvx-58p6-gjwc · Note