What is the CVSS score of CVE-2026-32055?

CVE-2026-32055 has a CVSS 3.1 base score of 7.6 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L. EPSS exploitation probability: 0.0%.

Which versions of Openclaw are affected by CVE-2026-32055?

A path traversal vulnerability in OpenClaw allows authenticated users to write files outside their designated workspace, potentially compromising system integrity and enabling unauthorized access to…. A patch is available.

Is there a public PoC exploit available for CVE-2026-32055?

Yes, a public proof-of-concept exploit is available for CVE-2026-32055. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate CVE-2026-32055?

Within 24 hours: Inventory all systems running OpenClaw and identify affected versions; restrict workspace access to essential users only. Within 7 days: Apply vendor patch 2026.2.26 or later to all affected instances in a staged deployment. Within 30 days: Validate patch deployment across all environments and conduct file system integrity checks for evidence of exploitation.

Openclaw CVE-2026-32055

EUVD-2026-13956 HIGH

Path Traversal (CWE-22)

2026-03-21 VulnCheck

GHSA-mgrq-9f93-wpp5

Path Traversal Openclaw

7.6

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.6 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

High

Availability

Low

Lifecycle Timeline

PoC Detected

Mar 23, 2026 - 16:22 vuln.today

Public exploit code

EUVD ID Assigned

Mar 21, 2026 - 01:00 euvd

EUVD-2026-13956

Analysis Generated

Mar 21, 2026 - 01:00 vuln.today

Patch released

Mar 21, 2026 - 01:00 nvd

Patch available

CVE Published

Mar 21, 2026 - 00:42 nvd

HIGH 7.6

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

2 npm packages depend on openclaw (2 direct, 0 indirect)

Ecosystem-wide dependent count for version 2026.2.26.

DescriptionCVE.org

OpenClaw versions prior to 2026.2.26 contain a path traversal vulnerability in workspace boundary validation that allows attackers to write files outside the workspace through in-workspace symlinks pointing to non-existent out-of-root targets. The vulnerability exists because the boundary check improperly resolves aliases, permitting the first write operation to escape the workspace boundary and create files in arbitrary locations.

AnalysisAI

OpenClaw versions before 2026.2.26 allow authenticated attackers to write arbitrary files outside the workspace directory by exploiting improper symlink resolution in path validation checks. An attacker with workspace access can leverage in-workspace symlinks pointing to external targets to bypass boundary restrictions on the first write operation. Public exploit code exists for this vulnerability, and a patch is available.

Technical ContextAI

OpenClaw is affected by CWE-22 (Improper Limitation of a Pathname to a Restricted Directory), commonly known as path traversal. The affected product is identified by CPE cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:*. The vulnerability stems from flawed workspace boundary validation logic that improperly resolves symbolic link aliases during path normalization. When a symlink is created inside the workspace pointing to a non-existent path outside the workspace root, the boundary check fails to properly validate the ultimate target location. The first write operation following symlink creation bypasses the workspace containment mechanism, allowing file creation in arbitrary filesystem locations that should be restricted. This represents a failure in canonicalization and path resolution security controls that are critical for workspace isolation in development and build environments.

RemediationAI

Upgrade OpenClaw to version 2026.2.26 or later, which contains fixes for the symlink path traversal vulnerability as documented in the GitHub Security Advisory at https://github.com/openclaw/openclaw/security/advisories/GHSA-mgrq-9f93-wpp5. The specific patches are available in commits 46eba86b45e9db05b7b792e914c4fe0de1b40a23 and 1aef45bc060b28a0af45a67dc66acd36aef763c9 at https://github.com/openclaw/openclaw. Until patching is completed, implement defense-in-depth controls including restricting authenticated user permissions to trusted personnel only, monitoring filesystem activity for unexpected writes outside workspace directories, and running OpenClaw processes with minimal filesystem privileges using operating system-level access controls or containerization with restricted mount points. Consider disabling symlink creation within workspaces if functionality permits, or implementing additional validation layers that reject symlinks pointing to non-existent targets before any write operations occur.