What is the CVSS score of CVE-2026-32007?

CVE-2026-32007 has a CVSS 3.1 base score of 6.8 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N. EPSS exploitation probability: 0.0%.

Which versions of Openclaw are affected by CVE-2026-32007?

CVE-2026-32007 presents notable security risk, a path traversal vulnerability rated CVSS 6.8. This could allow unauthorized file access.. A patch is available.

How to fix or mitigate CVE-2026-32007?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Review file handling controls.

Openclaw CVE-2026-32007

MEDIUM

Path Traversal (CWE-22)

2026-03-19 disclosure@vulncheck.com

GHSA-h9xm-j4qg-fvpg

Path Traversal Openclaw

6.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

6.8 MEDIUM

AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

Attack Vector

Network

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

None

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

Analysis Generated

Mar 19, 2026 - 22:30 vuln.today

CVE Published

Mar 19, 2026 - 22:16 nvd

MEDIUM 6.8

DescriptionCVE.org

OpenClaw versions prior to 2026.2.23 contain a path traversal vulnerability in the experimental apply_patch tool that allows attackers with sandbox access to modify files outside the workspace directory by exploiting inconsistent enforcement of workspace-only checks on mounted paths. Attackers can use apply_patch operations on writable mounts outside the workspace root to access and modify arbitrary files on the system.

AnalysisAI

OpenClaw versions before 2026.2.23 allow authenticated users with sandbox access to bypass workspace restrictions through a path traversal flaw in the apply_patch tool, enabling arbitrary file modification on the system. The vulnerability stems from inconsistent validation of mounted paths outside the workspace directory, permitting attackers to write to writable mounts beyond the intended sandbox boundaries. No patch is currently available for this MEDIUM severity issue.

Technical ContextAI

The vulnerability resides in OpenClaw's apply_patch tool, a utility designed to apply file patches within a sandboxed environment. The root cause is classified under CWE-22 (Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal'). The issue stems from inconsistent enforcement of workspace-boundary checks when processing mounted paths—specifically, the tool fails to properly validate that patch operations remain confined to the designated workspace root directory when interacting with writable mounts. This allows an attacker to construct apply_patch operations that traverse directory boundaries and access mounted filesystems outside the workspace, effectively breaking the sandbox isolation model. The affected product is OpenClaw, a collaborative development and automation platform.

RemediationAI

Immediately upgrade OpenClaw to version 2026.2.23 or later to apply the vendor's patch. The fix addresses inconsistent workspace boundary checks by enforcing stricter validation on all mounted paths before apply_patch operations are permitted. Until patching is completed, restrict sandbox access to users requiring it for essential workflows, disable the apply_patch tool if not actively used, and monitor file access logs for suspicious patch operations targeting locations outside the workspace directory. Reference the official security advisory at https://github.com/openclaw/openclaw/security/advisories/GHSA-h9xm-j4qg-fvpg for detailed upgrade instructions and verification steps.