PT-2026-31969 · Openclaw · Openclaw

Edward-X · Published 2026-03-26 · Updated 2026-04-10 · CVE-2026-35658

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.3.2

Description The image tool did not fully enforce the tools.fs.workspaceOnly filesystem boundary. This allowed traversal of sandbox bridge mounts outside the workspace, enabling reading of files that other filesystem tools would reject.

Recommendations Update to version 2026.3.2 or later.

Fix

Exposure of Resource to Wrong Sphere

Incorrect Authorization

Weakness Enumeration

CWE-668

CWE-863

Related Identifiers

CVE-2026-35658

GHSA-CFP9-W5V9-3Q4H

Affected Products

Openclaw

References · 10

• https://github.com/openclaw/openclaw/commit/630f1479c44f78484dfa21bb407cbe6f171dac87 · Patch
• https://github.com/openclaw/openclaw/commit/ccfeecb6887cd97937e33a71877ad512741e82b2 · Patch
• https://github.com/openclaw/openclaw/commit/14baadda2c456f3cf749f1f97e8678746a34a7f4 · Patch
• https://github.com/openclaw/openclaw/security/advisories/GHSA-cfp9-w5v9-3q4h · Vendor Advisory
• https://github.com/openclaw/openclaw/commit/dd9d9c1c609dcb4579f9e57bd7b5c879d0146b53 · Patch
• https://osv.dev/vulnerability/GHSA-cfp9-w5v9-3q4h · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-35658 · Security Note
• https://github.com/openclaw/openclaw · Note
• https://vulncheck.com/advisories/openclaw-filesystem-boundary-bypass-in-image-tool · Note
• https://twitter.com/CVEnew/status/2042710254316593461 · Twitter Post