PT-2026-39685 · Openclaw · Openclaw

Keensecuritylab · Published 2026-04-29 · Updated 2026-05-11 · CVE-2026-44996

Positive Technologies (AI Summary)

CVSS v4.0

6.3

Medium

Base vector

AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.4.15

Description An arbitrary local file read issue exists in the webchat audio embedding helper due to a failure to apply local media root containment checks. Attackers can manipulate the ReplyPayload.mediaUrl parameter produced by agents or tools to resolve absolute local paths or file URLs. This allows the reading of audio-like files, which are then embedded as base64-encoded data into webchat responses.

Recommendations Update to version 2026.4.15.

Exploit

Fix

Path traversal

Information Disclosure

Weakness Enumeration

CWE-22

CWE-200

Related Identifiers

CVE-2026-44996

GHSA-GFG9-5357-HV4C

Affected Products

Openclaw

References · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/44xxx/CVE-2026-44996.json · Exploit
• https://github.com/openclaw/openclaw/security/advisories/GHSA-gfg9-5357-hv4c · Vendor Advisory
• https://github.com/openclaw/openclaw/commit/6e58f1f9f54bca1fea1268ec0ee4c01a2af03dde · Patch
• https://vulncheck.com/advisories/openclaw-arbitrary-local-file-read-via-webchat-audio-embedding · Patch
• https://osv.dev/vulnerability/CVE-2026-44996 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-gfg9-5357-hv4c · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-44996 · Security Note
• https://github.com/openclaw/openclaw · Note
• https://t.me/CVEtracker/53382 · Telegram Post
• https://twitter.com/CVEnew/status/2053932438188130592 · Twitter Post