Which versions of Openclaw are affected by CVE-2026-33574?

Organizations using OpenClaw before 2026.3.8 should be aware of moderate risk from CVE-2026-33574 rated CVSS 5.8. Exploitation could compromise the security of affected deployments.. A patch is available.

How to fix or mitigate CVE-2026-33574?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Vendor patch is available.

Openclaw CVE-2026-33574

Q: What is the CVSS score of CVE-2026-33574?

CVE-2026-33574 has a CVSS 4.0 base score of 5.8 (Medium). CVSS vector: CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-17027 MEDIUM

Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)

2026-03-29 VulnCheck

Path Traversal Openclaw

5.8

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

5.8 MEDIUM

CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Local

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

EUVD ID Assigned

Mar 29, 2026 - 13:15 euvd

EUVD-2026-17027

Analysis Generated

Mar 29, 2026 - 13:15 vuln.today

Patch released

Mar 29, 2026 - 13:15 nvd

Patch available

CVE Published

Mar 29, 2026 - 12:44 nvd

MEDIUM 5.8

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

1 npm packages depend on openclaw (1 direct, 0 indirect)

Ecosystem-wide dependent count for version 2026.3.8.

DescriptionCVE.org

OpenClaw before 2026.3.8 contains a path traversal vulnerability in the skills download installer that validates the tools root lexically but reuses the mutable path during archive download and copy operations. A local attacker can rebind the tools-root path between validation and final write to redirect the installer outside the intended tools directory.

AnalysisAI

OpenClaw before version 2026.3.8 allows local authenticated attackers to write files outside the intended tools directory through a time-of-check-time-of-use (TOCTOU) path traversal vulnerability in the skills download installer. An attacker with local access and low privileges can rebind the tools-root symbolic link or path between the initial validation check and the final archive extraction, causing the installer to write malicious files to arbitrary locations on the system. While the attack requires local access and moderate effort (high complexity), successful exploitation grants the attacker arbitrary file write capability with potential impact on system integrity and availability.

Technical ContextAI

The vulnerability exploits a TOCTOU race condition (CWE-367) in OpenClaw's skills download installer component. The installer validates the tools-root path lexically to ensure it points to an intended directory, but the path variable remains mutable during subsequent archive download and copy operations. An attacker with local file system access can leverage symlink attacks or path rebinding between the validation phase and the actual file write operations, redirecting the installation to sensitive directories. This is a classic vulnerability pattern in file operations where validation and use are not atomic. The affected product (OpenClaw via CPE cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:*) spans all versions before 2026.3.8.

RemediationAI

Vendor-released patch: OpenClaw 2026.3.8 and later. Users should upgrade to version 2026.3.8 or higher to receive the fix. The upstream fix is available via GitHub commit 9abf014f3502009faf9c73df5ca2cff719e54639 (https://github.com/openclaw/openclaw/commit/9abf014f3502009faf9c73df5ca2cff719e54639). For users unable to upgrade immediately, restrict local user access to the OpenClaw installation directory and monitor file system activity in the tools-root directory for unexpected writes to sensitive locations. See the official security advisory at https://github.com/openclaw/openclaw/security/advisories/GHSA-vhwf-4x96-vqx2 for additional details.