Executive brief
OpenClaw, a tool used for managing memory-core artifacts, contains a vulnerability where it can be tricked into loading software components from the wrong location on a computer. If an attacker can influence the local workspace environment, they could force the application to execute unintended or malicious code. This could lead to a full system compromise or unauthorized access to sensitive data handled by the application.
Technical details
OpenClaw versions up to 2026.4.24 are vulnerable to an uncontrolled search path element (CWE-427) during memory-core artifact loading. The root cause is a local package root resolution path that is influenced by the current workspace state, allowing a 'fake' package root to be selected instead of the intended bundled artifact root. An attacker with local access and low privileges can manipulate the workspace environment to redirect artifact loading to an arbitrary local path. This can result in arbitrary code execution within the context of the OpenClaw process. The issue is fixed in version 2026.4.25.
Affected products
- OpenClaw openclaw <= 2026.4.24
Timeline
- 2026-05-28: disclosed
- 2026-06-11: advisory: NVD publication date
- 2026-07-02: patched: GitHub Advisory published/reviewed