Executive brief
OpenClaw is a tool for automated code patching and file management. A path traversal vulnerability in the apply_patch feature allows attackers with low privileges to write or delete files outside the intended workspace directory when sandbox containment is disabled, potentially compromising system integrity and confidentiality.
Technical details
This is a path traversal vulnerability (CWE-22) in OpenClaw's apply_patch function where the non-sandbox path resolution does not properly enforce workspace containment. Attackers can craft relative paths (e.g., ../../...) or use absolute paths to escape the configured workspace directory in non-sandboxed mode. The vulnerability requires low privileges (PR:L) and network access (AV:N), with no user interaction needed. Successful exploitation allows reading, writing, and deleting arbitrary files outside the workspace. The issue is fixed in version 2026.2.14 (merge commit 5544646a09c0121fca7d7093812dc2de8437c7f1).
Affected products
- OpenClaw OpenClaw <= 2026.2.13
Timeline
- 2026-02-19: disclosed: GHSA-r5fq-947m-xm57 published
- 2026-02-19: patched: Fixed in version 2026.2.14