Which versions of OpenClaw are affected by CVE-2026-41370?

CVE-2026-41370 is a path traversal vulnerability in OpenClaw's ACP dispatch mechanism that allows authenticated users to read arbitrary files on affected systems, potentially exposing sensitive data…. A patch is available.

How to fix or mitigate CVE-2026-41370?

Within 24 hours: Identify all OpenClaw deployments and their current versions via inventory/asset management system. Within 7 days: Upgrade all OpenClaw instances to version 2026.3.31 or later, or apply the upstream fix via GitHub commit 566fb73d9d if version numbering differs in your deployment. Within 30 days: Conduct audit of access logs for any suspicious file-access patterns by authenticated users, particularly targeting /etc, /root, and other sensitive directories outside intended attachment paths.

OpenClaw CVE-2026-41370

Q: What is the CVSS score of CVE-2026-41370?

CVE-2026-41370 has a CVSS 4.0 base score of 7.1 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

HIGH

Path Traversal (CWE-22)

2026-04-28 disclosure@vulncheck.com

Path Traversal Openclaw

7.1

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

7.1 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Re-analysis Queued

Apr 28, 2026 - 16:37 vuln.today

cvss_changed

Analysis Generated

Apr 28, 2026 - 00:32 vuln.today

Analysis Generated

Apr 28, 2026 - 00:22 vuln.today

CVE Published

Apr 28, 2026 - 00:16 nvd

HIGH 7.1

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

1 npm packages depend on openclaw (1 direct, 0 indirect)

Ecosystem-wide dependent count for version 2026.3.31.

DescriptionCVE.org

OpenClaw before 2026.3.31 contains a path traversal vulnerability in ACP dispatch that allows attackers to read arbitrary files by manipulating inbound channel attachment paths. Remote attackers can bypass attachment-cache and root directory checks to access files outside intended directories.

AnalysisAI

Path traversal in OpenClaw's ACP dispatch mechanism allows authenticated remote attackers to read arbitrary files outside intended directories by manipulating inbound channel attachment paths. Attackers can bypass both attachment-cache and root directory security checks to access sensitive system files. Upstream fix available via GitHub commit 566fb73d9d, with versions prior to 2026.3.31 confirmed vulnerable. No CISA KEV listing at time of analysis, indicating targeted rather than widespread exploitation.

Technical ContextAI

OpenClaw is an open-source game engine project. This vulnerability stems from improper limitation of pathname to a restricted directory (CWE-22), specifically within the ACP (application communication protocol) dispatch component that handles channel attachments. The flaw occurs when the application processes inbound attachment paths without adequately validating that resolved file paths remain within designated safe directories. Path traversal attacks typically exploit inadequate canonicalization of user-supplied paths containing sequences like '../' to escape chroot jails or designated upload directories. The CVSS 4.0 vector indicates network-accessible exploitation with low attack complexity requiring only low-privilege authentication, with high confidentiality impact but no integrity or availability consequences, consistent with a read-only file disclosure vulnerability.

RemediationAI

Upgrade OpenClaw to version 2026.3.31 or later, which contains the security fix committed in GitHub commit 566fb73d9da2d73c0be0d9b8e5b762e4dcd8e81d. Organizations unable to immediately upgrade should implement compensating controls including: restrict ACP dispatch access to only trusted authenticated users by tightening authentication requirements and enforcing principle of least privilege on user accounts (trade-off: may limit legitimate functionality for low-privilege users); implement web application firewall rules to detect and block HTTP requests containing path traversal sequences like '../', '..\', URL-encoded variants, and absolute path references in attachment-related parameters (trade-off: potential false positives blocking legitimate filenames containing these sequences); apply filesystem-level access controls to ensure the OpenClaw process runs with minimal read permissions, preventing access to sensitive directories even if path traversal succeeds (trade-off: requires careful privilege separation and may complicate deployment). Consult the GitHub security advisory at https://github.com/openclaw/openclaw/security/advisories/GHSA-58q2-7r52-jq62 and VulnCheck analysis at https://www.vulncheck.com/advisories/openclaw-path-traversal-via-inbound-channel-attachment-path-in-acp-dispatch for additional context.