Is there a patch available for CVE-2026-33581?

Yes, a patch is available for CVE-2026-33581. Update the affected software to the latest version immediately.

Openclaw CVE-2026-33581

Q: What is the CVSS score of CVE-2026-33581?

CVE-2026-33581 has a CVSS 4.0 base score of 7.1 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-17441 HIGH

Path Traversal (CWE-22)

2026-03-31 VulnCheck

GHSA-3gr8-2752-h46q

GHSA-v8wv-jg3q-qwpq

Path Traversal Openclaw

7.1

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

7.1 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

EUVD ID Assigned

Mar 31, 2026 - 14:30 euvd

EUVD-2026-17441

Analysis Generated

Mar 31, 2026 - 14:30 vuln.today

Patch released

Mar 31, 2026 - 14:30 nvd

Patch available

CVE Published

Mar 31, 2026 - 14:10 nvd

HIGH 7.1

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

3 npm packages depend on openclaw (3 direct, 0 indirect)

Ecosystem-wide dependent count for version 2026.3.24.

DescriptionCVE.org

OpenClaw before 2026.3.24 contains a sandbox bypass vulnerability in the message tool that allows attackers to read arbitrary local files by using mediaUrl and fileUrl alias parameters that bypass localRoots validation. Remote attackers can exploit this by routing file requests through unvalidated alias parameters to access files outside the intended sandbox directory.

AnalysisAI

OpenClaw before version 2026.3.24 contains a sandbox bypass vulnerability in its message tool that allows local attackers to read arbitrary files by manipulating mediaUrl and fileUrl alias parameters to circumvent localRoots validation. The vulnerability exploits improper input sanitization in file request routing, enabling unauthorized disclosure of sensitive files outside the intended sandbox directory without requiring authentication or user interaction.

Technical ContextAI

OpenClaw's message tool implements a sandbox mechanism using localRoots validation to restrict file access to designated directories. The vulnerability stems from a path traversal flaw (CWE-22) where alias parameters (mediaUrl and fileUrl) are processed without proper validation against the localRoots restrictions. Attackers can craft requests that route through these unvalidated alias parameters, allowing directory traversal sequences (such as ../ or similar path manipulation) to bypass the intended access controls. This is a classic sandbox escape where secondary input channels are trusted without re-validating sandbox constraints.

RemediationAI

Vendor-released patch available: upgrade to OpenClaw version 2026.3.24 or later. This patch implements proper validation of mediaUrl and fileUrl alias parameters against localRoots restrictions, eliminating the sandbox bypass. Users should immediately apply this update from the official OpenClaw repository. For detailed patch information, refer to the GitHub security advisory at https://github.com/openclaw/openclaw/security/advisories/GHSA-v8wv-jg3q-qwpq and the commit fixing the vulnerability at https://github.com/openclaw/openclaw/commit/1d7cb6fc03552bbba00e7cffb3aa9741f5556416.