Which versions of Openclaw are affected by CVE-2026-32846?

OpenClaw versions up to 2026.3.23 contain a path traversal vulnerability allowing unauthenticated attackers to read sensitive files such as system configurations, environment variables, and SSH…. A patch is available.

Is there a public PoC exploit available for CVE-2026-32846?

Yes, a public proof-of-concept exploit is available for CVE-2026-32846. Prioritise patching immediately. EPSS: 0.1%.

How to fix or mitigate CVE-2026-32846?

Within 24 hours: Identify all systems running OpenClaw versions ≤2026.3.23 and assess exposure in air-gapped or internet-facing environments. Within 7 days: Apply vendor patch from commit 4797bbc or later released version; test in non-production environment before deployment. Within 30 days: Complete patch rollout across all affected instances and conduct audit of file access logs for signs of exploitation.

Openclaw CVE-2026-32846

Q: What is the CVSS score of CVE-2026-32846?

CVE-2026-32846 has a CVSS 4.0 base score of 8.7 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

EUVD-2026-16248 HIGH

Path Traversal (CWE-22)

2026-03-26 VulnCheck

GHSA-hggm-x7r9-mm7v

Path Traversal Openclaw

8.7

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

8.7 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

PoC Detected

Mar 31, 2026 - 21:40 vuln.today

Public exploit code

EUVD ID Assigned

Mar 26, 2026 - 16:45 euvd

EUVD-2026-16248

Analysis Generated

Mar 26, 2026 - 16:45 vuln.today

Patch released

Mar 26, 2026 - 16:45 nvd

Patch available

CVE Published

Mar 26, 2026 - 16:36 nvd

HIGH 8.7

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

3 npm packages depend on openclaw (3 direct, 0 indirect)

Ecosystem-wide dependent count for version 2026.3.28.

DescriptionCVE.org

OpenClaw through 2026.3.23 (fixed in commit 4797bbc) contains a path traversal vulnerability in media parsing that allows attackers to read arbitrary files by bypassing path validation in the isLikelyLocalPath() and isValidMedia() functions. Attackers can exploit incomplete validation and the allowBareFilename bypass to reference files outside the intended application sandbox, resulting in disclosure of sensitive information including system files, environment files, and SSH keys.

AnalysisAI

Path traversal in OpenClaw through version 2026.3.23 enables unauthenticated remote attackers to read arbitrary files including system configurations, environment files, and SSH private keys by bypassing media parsing validation functions. The vulnerability stems from incomplete path validation in isLikelyLocalPath() and isValidMedia() functions, with an allowBareFilename bypass permitting sandbox escape. Vendor-released patch available in commit 4797bbc (CVSS 8.7, no public exploit identified at time of analysis).

Technical ContextAI

OpenClaw is identified by CPE cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:* as the affected product. This vulnerability represents CWE-22 (Improper Limitation of a Pathname to a Restricted Directory), commonly known as path traversal or directory traversal. The flaw exists in the media parsing subsystem where two validation functions-isLikelyLocalPath() and isValidMedia()-perform insufficient sanitization of file paths. An allowBareFilename configuration or code path allows attackers to supply paths that reference locations outside the intended application sandbox, bypassing intended access controls. The CVSS 4.0 vector confirms network-based exploitation (AV:N) with low complexity (AC:L) and no prerequisites (AT:N), targeting confidentiality of the vulnerable system (VC:H) without requiring user interaction (UI:N) or privileges (PR:N).

RemediationAI

Upgrade OpenClaw to commit 4797bbc5b96e2cca5532e43b58915c051746fe37 or later, which contains the fix for the path traversal vulnerability (see patch at https://github.com/openclaw/openclaw/commit/4797bbc5b96e2cca5532e43b58915c051746fe37 and pull request https://github.com/openclaw/openclaw/pull/54642). Review the vendor security advisory at https://github.com/openclaw/openclaw/security/advisories/GHSA-f6pf-4gjx-c94r for complete remediation guidance. Until patching is completed, implement network-level controls to restrict access to OpenClaw media parsing endpoints to trusted IP ranges only, disable or restrict the allowBareFilename functionality if configurable, and monitor file access logs for suspicious traversal patterns such as repeated parent directory references or access attempts to sensitive system paths.