What is the CVSS score of CVE-2026-32008?

CVE-2026-32008 has a CVSS 3.1 base score of 6.5 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.0%.

Which versions of Openclaw are affected by CVE-2026-32008?

CVE-2026-32008 presents notable security risk rated CVSS 6.5. Exploitation could compromise the security of affected deployments.. A patch is available.

How to fix or mitigate CVE-2026-32008?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Openclaw CVE-2026-32008

MEDIUM

Externally Controlled Reference to a Resource in Another Sphere (CWE-610)

2026-03-19 disclosure@vulncheck.com

GHSA-45cg-2683-gfmq

Information Disclosure Openclaw

6.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

6.5 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

Analysis Generated

Mar 19, 2026 - 22:30 vuln.today

CVE Published

Mar 19, 2026 - 22:16 nvd

MEDIUM 6.5

DescriptionCVE.org

OpenClaw versions prior to 2026.2.21 contain an improper URL scheme validation vulnerability in the assertBrowserNavigationAllowed() function that allows authenticated users with browser-tool access to navigate to file:// URLs. Attackers can exploit this by accessing local files readable by the OpenClaw process user through browser snapshot and extraction actions to exfiltrate sensitive data.

AnalysisAI

OpenClaw versions before 2026.2.21 allow authenticated users with browser-tool access to bypass URL scheme validation and navigate to file:// URLs, enabling local file exfiltration through browser snapshot and extraction features. An attacker with valid credentials could read sensitive files accessible to the OpenClaw process and extract them from the system. No patch is currently available.

Technical ContextAI

The vulnerability resides in the assertBrowserNavigationAllowed() function within OpenClaw, a tool used for browser automation and testing. The root cause is CWE-610 (Improper Restriction of Rendered UI Layers or Frames), which manifests as an improper validation of URL schemes. The function fails to adequately restrict navigation to dangerous protocols such as file://, which should be blocked to prevent unauthorized local file access. When a user with browser-tool access triggers browser snapshot or extraction actions, the inadequate validation allows the attacker to construct a malicious navigation request to a file:// URL, circumventing intended security boundaries and enabling arbitrary local file read capabilities on the host system.

RemediationAI

Upgrade OpenClaw to version 2026.2.21 or later immediately, as a patch has been released and is available via the vendor repository (https://github.com/openclaw/openclaw/commit/220bd95eff6838234e8b4b711f86d4565e16e401). For organizations unable to patch immediately, restrict access to the browser-tool feature to only trusted, highly-vetted users and implement file system access controls to limit the OpenClaw process user's read permissions to only necessary directories, reducing the blast radius of potential exfiltration. Additionally, monitor browser snapshot and extraction actions through audit logging to detect suspicious file:// navigation attempts. Review the vendor security advisory at https://github.com/openclaw/openclaw/security/advisories/GHSA-45cg-2683-gfmq for environment-specific guidance.