Junglewise Threat Intelligence

CVE-2026-28482: OpenClaw path traversal in session transcript operations

CVE-2026-28482 · Severity: low · CVSS 3.1 · Published 2026-02-18

Technologies: Openclaw. Vendors: Openclaw.

Executive brief

OpenClaw is an AI agent framework that manages conversation transcripts and session state on a gateway server. Versions up to 2026.2.9 allow authenticated attackers to read or write arbitrary files on the system by crafting malicious session IDs or file paths with directory traversal sequences (e.g., `../../etc/passwd`). By default the gateway only accepts local connections, but exposed deployments significantly increase attack surface. An attacker with valid gateway credentials can exfiltrate sensitive configuration files, logs, or system data.

Technical details

OpenClaw versions ≤ 2026.2.9 construct transcript file paths using unsanitized session IDs and accept sessionFile paths without validating that they remain within the intended agent sessions directory (CWE-22: Path Traversal). An attacker can inject path traversal sequences (e.g., `../..`, `/etc/passwd`) into the sessionId or sessionFile parameters during transcript read/write operations performed by the gateway. Exploitation requires prior authentication to the gateway via a valid token or password. By default the gateway binds only to loopback (127.0.0.1), limiting exposure to local attackers or those with network access to the host; however, configurations that expose the gateway to the network expand the attack surface to remote authenticated attackers. The fix (versions ≥ 2026.2.12) validates session IDs by rejecting path separators and traversal sequences, and enforces that all session transcript operations remain confined within the agent sessions directory.

Affected products

  • OpenClaw openclaw <=2026.2.9

Timeline

  • 2026-02-18: disclosed: Advisory published (GHSA-5xfq-5mr7-426q)
  • 2026-02-13: patched: Fix commit 4199f9889f0c307b77096a229b9e085b8d856c26 authored
  • 2026-02-14: patched: Additional hardening commit cab0abf52ac91e12ea7a0cf04fff315cf0c94d64 authored
  • 2026-02-12: other: Patched version 2026.2.12 released

References

Related threats