What is the CVSS score of CVE-2026-32026?

CVE-2026-32026 has a CVSS 3.1 base score of 6.5 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.1%.

Which versions of Openclaw are affected by CVE-2026-32026?

CVE-2026-32026 presents notable security risk, a path traversal vulnerability rated CVSS 6.5. This could allow unauthorized file access.. A patch is available.

How to fix or mitigate CVE-2026-32026?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Review file handling controls.

Openclaw CVE-2026-32026

MEDIUM

Path Traversal (CWE-22)

2026-03-19 disclosure@vulncheck.com

GHSA-33hm-cq8r-wc49

Path Traversal Openclaw

6.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

6.5 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

Analysis Generated

Mar 19, 2026 - 22:30 vuln.today

CVE Published

Mar 19, 2026 - 22:16 nvd

MEDIUM 6.5

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

1 npm packages depend on openclaw (1 direct, 0 indirect)

Ecosystem-wide dependent count for version 2026.2.24.

DescriptionCVE.org

OpenClaw versions prior to 2026.2.24 contain an improper path validation vulnerability in sandbox media handling that allows absolute paths under the host temporary directory outside the active sandbox root. Attackers can exploit this by providing malicious media references to read and exfiltrate arbitrary files from the host temporary directory through attachment delivery mechanisms.

AnalysisAI

OpenClaw versions prior to 2026.2.24 contain an improper path validation vulnerability (CWE-22: Path Traversal) in sandbox media handling that allows attackers with low privileges to read and exfiltrate arbitrary files from the host temporary directory. An authenticated attacker can exploit this by crafting malicious media references delivered through attachment mechanisms, bypassing sandbox isolation to access sensitive files outside the intended sandbox root. No active exploitation in the wild (KEV status unknown), but proof-of-concept code references are available in GitHub commit history.

Technical ContextAI

The vulnerability exists in OpenClaw's sandbox media handling subsystem, which is responsible for processing and validating file paths for media attachments. The root cause is improper path validation against absolute paths, allowing traversal outside the active sandbox root directory into the host's temporary directory (/tmp or equivalent). This is a classic CWE-22 Path Traversal vulnerability where insufficient canonicalization and validation of user-supplied file paths enables directory traversal attacks. The attachment delivery mechanism processes media references without properly restricting access to sandbox-isolated paths, allowing resolution of absolute paths on the host filesystem. The vulnerability is compounded by the fact that temporary directories often contain sensitive files and system state information accessible to application processes.

RemediationAI

Immediately upgrade OpenClaw to version 2026.2.24 or later to apply the path validation fixes included in the three referenced patches. Organizations unable to patch immediately should implement the following mitigations: restrict network access to OpenClaw to trusted internal networks only, limit authenticated user accounts to those requiring access, implement filesystem-level access controls to restrict the OpenClaw process's ability to read temporary directories, and monitor temporary directory access patterns for suspicious activity. Review and audit any sensitive data stored in system temporary directories (/tmp, /var/tmp, %TEMP% on Windows) and consider relocating it to properly secured locations. Consult the official security advisory at https://github.com/openclaw/openclaw/security/advisories/GHSA-33hm-cq8r-wc49 for detailed patch notes and any additional vendor-recommended controls.