What is the CVSS score of CVE-2026-32024?

CVE-2026-32024 has a CVSS 3.1 base score of 5.5 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.0%.

Which versions of Openclaw are affected by CVE-2026-32024?

CVE-2026-32024 presents moderate security risk rated CVSS 5.5. Exploitation could compromise the security of affected deployments.. A patch is available.

How to fix or mitigate CVE-2026-32024?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Openclaw CVE-2026-32024

MEDIUM

Improper Link Resolution Before File Access (CWE-59)

2026-03-19 disclosure@vulncheck.com

GHSA-rx3g-mvc3-qfjf

Information Disclosure Openclaw

5.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.5 MEDIUM

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

Analysis Generated

Mar 19, 2026 - 22:30 vuln.today

CVE Published

Mar 19, 2026 - 22:16 nvd

MEDIUM 5.5

DescriptionCVE.org

OpenClaw versions prior to 2026.2.22 contain a symlink traversal vulnerability in avatar handling that allows attackers to read arbitrary files outside the configured workspace boundary. Remote attackers can exploit this by requesting avatar resources through gateway surfaces to disclose local files accessible to the OpenClaw process.

AnalysisAI

OpenClaw versions before 2026.2.22 suffer from a symlink traversal flaw in avatar processing that enables local attackers with user-level privileges to read sensitive files beyond the intended workspace directory. An attacker can leverage this through gateway interfaces to access arbitrary files with OpenClaw process permissions, resulting in unauthorized information disclosure. No patch is currently available for this vulnerability.

Technical ContextAI

The vulnerability exists in OpenClaw's avatar handling mechanism, which fails to properly validate or sanitize symlink references when processing avatar file requests. This is a classic CWE-59 (Improper Link Resolution Before File Access) issue where the application does not adequately check whether a resolved file path lies within the intended workspace boundary before reading it. The vulnerability is exposed through gateway surfaces that handle avatar resource requests, allowing traversal of the filesystem hierarchy via symbolic links. The root cause is insufficient path canonicalization and validation in the avatar request handler, which fails to detect or prevent symlink-based directory traversal attacks.

RemediationAI

Upgrade OpenClaw to version 2026.2.22 or later, which includes the symlink traversal fix applied in the referenced commits. This is the primary and recommended remediation. Organizations unable to patch immediately should restrict network access to OpenClaw gateway services to trusted IP ranges only, enforce principle of least privilege by running the OpenClaw process with minimal required permissions, and audit filesystem permissions to ensure sensitive files outside the workspace are not world-readable by the OpenClaw process user. Monitor avatar requests in gateway logs for suspicious path traversal patterns. Consult the official security advisory at https://github.com/openclaw/openclaw/security/advisories/GHSA-rx3g-mvc3-qfjf for detailed patch release notes and deployment instructions.