Which versions of Openclaw are affected by CVE-2026-35668?

OpenClaw versions before 2026.3.24 contain a path traversal vulnerability that allows authenticated users with low-privilege access to read arbitrary files across agent workspaces, including…. A patch is available.

How to fix or mitigate CVE-2026-35668?

Within 24 hours: Inventory all OpenClaw deployments and document current versions in use; disable or restrict low-privilege account access to multi-agent environments where feasible. Within 7 days: Contact OpenClaw vendor for patch availability timeline and interim security guidance; implement network segmentation to isolate agent workspaces if architectural changes are possible. Within 30 days: Upgrade to OpenClaw 2026.3.24 or later when available; conduct access control audit of all authenticated accounts and rotate any API keys or credentials stored in agent workspaces.

Openclaw CVE-2026-35668

Q: What is the CVSS score of CVE-2026-35668?

CVE-2026-35668 has a CVSS 4.0 base score of 7.1 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

EUVD-2026-21482 HIGH

Path Traversal (CWE-22)

2026-04-10 VulnCheck

GHSA-hr5v-j9h9-xjhg

Path Traversal Openclaw

7.1

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

7.1 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Patch released

Apr 10, 2026 - 20:30 nvd

Patch available

EUVD ID Assigned

Apr 10, 2026 - 16:30 euvd

EUVD-2026-21482

Analysis Generated

Apr 10, 2026 - 16:30 vuln.today

CVE Published

Apr 10, 2026 - 16:03 nvd

HIGH 7.1

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

3 npm packages depend on openclaw (3 direct, 0 indirect)

Ecosystem-wide dependent count for version 2026.3.24.

DescriptionCVE.org

OpenClaw before 2026.3.24 contains a path traversal vulnerability in sandbox enforcement allowing sandboxed agents to read arbitrary files from other agents' workspaces via unnormalized mediaUrl or fileUrl parameter keys. Attackers can exploit incomplete parameter validation in normalizeSandboxMediaParams and missing mediaLocalRoots context to access sensitive files including API keys and configuration data outside designated sandbox roots.

AnalysisAI

Path traversal in OpenClaw before 2026.3.24 allows authenticated sandboxed agents to read arbitrary files from other agents' workspaces via unnormalized mediaUrl or fileUrl parameters. Incomplete validation in normalizeSandboxMediaParams and missing mediaLocalRoots context enables attackers to bypass sandbox boundaries and access sensitive data including API keys and configuration files outside designated roots. This cross-agent data leakage vulnerability requires low-privilege authentication but no user interaction. No public exploit identified at time of analysis.

Technical ContextAI

Root cause stems from CWE-22 path traversal in parameter normalization logic. The normalizeSandboxMediaParams function fails to properly validate mediaUrl/fileUrl keys against mediaLocalRoots context, allowing directory traversal sequences to escape sandbox boundaries. Network-accessible with low attack complexity, requiring only authenticated sandboxed agent privileges to traverse filesystem paths across isolated workspace contexts.

RemediationAI

Upgrade to OpenClaw version 2026.3.24 or later, which addresses the path traversal vulnerability through enhanced parameter validation and proper mediaLocalRoots enforcement. If immediate upgrade is not feasible, implement strict input validation on all mediaUrl and fileUrl parameters to reject unnormalized paths containing traversal sequences (../, .\). Review sandbox configuration to ensure mediaLocalRoots restrictions are properly defined and enforced. Audit agent workspace permissions and rotate potentially exposed API keys or configuration credentials that may have been accessed. Consult vendor security advisory for complete details: https://github.com/openclaw/openclaw/security/advisories/GHSA-hr5v-j9h9-xjhg and https://www.vulncheck.com/advisories/openclaw-sandbox-media-root-bypass-via-unnormalized-mediaurl-and-fileurl-parameters