What is the CVSS score of CVE-2026-32903?

CVE-2026-32903 has a CVSS 3.1 base score of 6.1 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L.

Which versions of Openclaw are affected by CVE-2026-32903?

Organizations using OpenClaw before 2026.3.2 should be aware of moderate risk from CVE-2026-32903 rated CVSS 6.1. Exploitation could compromise the security of affected deployments.. A patch is available.

How to fix or mitigate CVE-2026-32903?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Vendor patch is available.

Openclaw CVE-2026-32903

EUVD-2026-14585 MEDIUM

Improper Link Resolution Before File Access (CWE-59)

2026-03-23 VulnCheck

Information Disclosure Openclaw

6.1

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

6.1 MEDIUM

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

Low

Lifecycle Timeline

EUVD ID Assigned

Mar 23, 2026 - 22:00 euvd

EUVD-2026-14585

Analysis Generated

Mar 23, 2026 - 22:00 vuln.today

Patch released

Mar 23, 2026 - 22:00 nvd

Patch available

CVE Published

Mar 23, 2026 - 21:36 nvd

MEDIUM 6.1

DescriptionCVE.org

OpenClaw before 2026.3.2 contains a symlink traversal vulnerability in stageSandboxMedia that allows attackers to overwrite files outside the sandbox workspace. Attackers can exploit unvalidated destination paths in media/inbound writes to follow symlinks and overwrite host files beyond intended sandbox boundaries.

AnalysisAI

OpenClaw before version 2026.3.2 contains a symlink traversal vulnerability in the stageSandboxMedia function that allows local attackers with limited privileges to overwrite arbitrary files outside the intended sandbox workspace. By exploiting unvalidated destination paths in media/inbound write operations, an attacker can follow symlinks to modify host files beyond sandbox boundaries, resulting in integrity compromise and potential system availability impact. A patch is available from the vendor.

Technical ContextAI

The vulnerability exists in OpenClaw's sandbox media handling mechanism (stageSandboxMedia function), which processes media files written to media/inbound directories. The root cause is classified under CWE-59 (Improper Link Resolution Before File Access), a classic symlink traversal flaw where the application fails to validate and canonicalize destination paths before following symlinks during file operations. The affected product is identified via CPE cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:*, indicating all versions prior to 2026.3.2 are vulnerable. The vulnerability specifically impacts the sandbox isolation mechanism, which is designed to restrict file operations to a confined workspace, but the lack of path validation allows attackers to escape these boundaries.

RemediationAI

Immediately upgrade OpenClaw to version 2026.3.2 or later to apply the vendor patch (details and commit reference available at https://github.com/openclaw/openclaw/commit/17ede52a4be3034f6ec4b883ac6b81ad0101558a and https://vulncheck.com/advisories/openclaw-mar-symlink-traversal-in-stagesandboxmedia-destination). As an interim workaround before patching is possible, restrict write permissions on the media/inbound directory to prevent unprivileged users or processes from creating symlinks, implement file integrity monitoring on critical host files that might be targeted, and limit OpenClaw's process privileges to the minimum necessary using OS-level access controls (e.g., user/group restrictions, AppArmor, or SELinux policies). Additionally, audit recent OpenClaw activity logs for evidence of suspicious file modifications outside expected sandbox boundaries.