What is the CVSS score of CVE-2026-32013?

CVE-2026-32013 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Openclaw are affected by CVE-2026-32013?

OpenClaw versions prior to 2026.2.25 contain a critical vulnerability that allows attackers to read and write files outside intended boundaries, potentially leading to unauthorized access to…. A patch is available.

How to fix or mitigate CVE-2026-32013?

Within 24 hours: Inventory all OpenClaw deployments and identify those running versions prior to 2026.2.25; document affected systems and their data sensitivity. Within 7 days: Implement network segmentation to restrict OpenClaw agent access to critical systems; disable agents.files.get and agents.files.set methods if operationally feasible; monitor agent logs for suspicious file access patterns. Within 30 days: Upgrade to OpenClaw 2026.2.25 or later once released; conduct post-patch security testing; review file access logs for evidence of exploitation.

Openclaw CVE-2026-32013

HIGH

Improper Link Resolution Before File Access (CWE-59)

2026-03-19 disclosure@vulncheck.com

GHSA-fgvx-58p6-gjwc

RCE Openclaw

8.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

Analysis Generated

Mar 19, 2026 - 22:30 vuln.today

CVE Published

Mar 19, 2026 - 22:16 nvd

HIGH 8.8

DescriptionCVE.org

OpenClaw versions prior to 2026.2.25 contain a symlink traversal vulnerability in the agents.files.get and agents.files.set methods that allows reading and writing files outside the agent workspace. Attackers can exploit symlinked allowlisted files to access arbitrary host files within gateway process permissions, potentially enabling code execution through file overwrite attacks.

AnalysisAI

A symlink traversal vulnerability in OpenClaw allows authenticated attackers to read and write arbitrary files on the host system through the agents.files.get and agents.files.set methods. The vulnerability affects OpenClaw versions prior to 2026.2.25 and can lead to remote code execution through strategic file overwrites. With a high CVSS score of 8.8 and an RCE tag, this represents a critical security risk for organizations using affected versions.

Technical ContextAI

OpenClaw is affected by a CWE-59 (Improper Link Resolution Before File Access) vulnerability, commonly known as symlink traversal. The vulnerability exists in the file handling methods that fail to properly validate symbolic links within the agent workspace, allowing attackers to follow symlinks to access files outside the intended directory boundaries. When processing allowlisted files that are symlinked, the application incorrectly resolves the symlink target without proper validation, granting access to any file readable or writable by the gateway process. This classic path traversal variant leverages the operating system's symlink functionality to bypass directory restrictions.

RemediationAI

Upgrade OpenClaw to version 2026.2.25 or later immediately, as documented in the patch commit at https://github.com/openclaw/openclaw/commit/125f4071bcbc0de32e769940d07967db47f09d3d. Until patching is complete, implement strict access controls on the OpenClaw gateway service, limiting access to trusted users only and monitoring file access logs for suspicious patterns involving symlinks or directory traversal attempts. Consider implementing additional file system permissions to restrict the gateway process's ability to access sensitive system files as a defense-in-depth measure.