Executive brief
OpenClaw is a development tool that records session transcripts containing tool output and activity logs. When session transcript files were created, they were written with overly permissive file permissions, allowing other local users on a shared system to read these transcript files. An attacker with local access could extract secrets or sensitive information from transcripts that were meant to be private to the user.
Technical details
OpenClaw session transcript JSONL files were created without forced user-only permissions (0o600), resulting in files that could be readable by other local users depending on host umask and environment configuration. The vulnerability exists in src/config/sessions/transcript.ts and affects all versions up to 2026.2.15. An attacker with local system access can read transcript contents containing secrets and tool output. The fix, shipped in version 2026.2.17, enforces 0o600 permissions on newly created transcript files and includes remediation for existing files with incorrect permissions via a security audit flow.
Affected products
- OpenClaw openclaw ≤ 2026.2.15
Timeline
- 2026-03-16: disclosed
- 2026-02-17: patched: Fixed in version 2026.2.17