Executive brief
OpenClaw, a Node.js-based tool, contains a security flaw in its messaging component that fails to properly restrict file access. An attacker can bypass the intended security boundaries to read sensitive files from the underlying server. This could lead to the exposure of private data, configuration files, or system credentials, potentially compromising the entire host environment.
Technical details
A path traversal vulnerability (CWE-22) exists in OpenClaw's message tool due to improper validation of alias parameters. While the canonical media path handling enforces sandbox restrictions via 'localRoots' validation, the 'mediaUrl' and 'fileUrl' parameters in 'message-action-params.ts' and 'message-action-runner.ts' do not. A remote attacker with low privileges can exploit this by providing specially crafted file URLs to access arbitrary files outside the intended sandbox directory. The vulnerability is fixed in version 2026.3.24 by normalizing and validating these alias parameters against the sandbox root.
Affected products
- OpenClaw OpenClaw < 2026.3.24
Timeline
- 2026-03-24: patched: Fix committed to repository
- 2026-03-29: advisory: GitHub Security Advisory published
- 2026-03-31: disclosed: CVE published to NVD