Is there a patch available for CVE-2026-43570?

Yes, a patch is available for CVE-2026-43570. Update the affected software to the latest version immediately.

OpenClaw CVE-2026-43570

Q: What is the CVSS score of CVE-2026-43570?

CVE-2026-43570 has a CVSS 4.0 base score of 6.0 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-27291 MEDIUM

UNIX Symbolic Link (Symlink) Following (CWE-61)

2026-05-05 VulnCheck

Information Disclosure Openclaw

6.0

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

6.0 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Scope

Lifecycle Timeline

CVSS changed

May 05, 2026 - 12:37 NVD

6.5 (MEDIUM) 6.0 (MEDIUM)

Source Code Evidence Fetched

May 05, 2026 - 12:22 vuln.today

Analysis Generated

May 05, 2026 - 12:22 vuln.today

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

5 npm packages depend on openclaw (5 direct, 0 indirect)

Ecosystem-wide dependent count for version 2026.3.22.

DescriptionCVE.org

OpenClaw versions 2026.3.22 before 2026.4.5 contain a symlink traversal vulnerability in remote marketplace repository path handling that allows attackers to escape the expected repository root. Attackers can exploit this by providing crafted symlink paths to access files outside the intended repository directory.

AnalysisAI

Symlink traversal in OpenClaw versions 2026.3.22 before 2026.4.5 allows unauthenticated remote attackers with user interaction to read arbitrary files outside the remote marketplace repository root. The vulnerability exploits improper path canonicalization in the marketplace plugin's remote repository handler, exposing sensitive information with a CVSS score of 6.5. Vendor-released patch available in version 2026.4.5.

Technical ContextAI

OpenClaw's marketplace plugin processes remote marketplace repository paths without proper symlink resolution. The underlying issue is CWE-61 (Authorization Path Traversal), where the application fails to properly validate that resolved paths remain within the intended repository boundary. The fix involves removing automatic canonicalization via fs.realpath() in the resolveLocalMarketplaceSource() function (see commit 94b0062e90467e1582b47cc971f308457c537f3a), which was incorrectly resolving symlinks and enabling escape from the marketplace root directory. The marketplace.ts module now preserves logical paths rather than resolving them to their canonical form, preventing attackers from crafting symlink paths that resolve to parent directories or unintended locations.

RemediationAI

Upgrade OpenClaw to version 2026.4.5 or later, which includes the symlink traversal fix committed in commits 94b0062e90467e1582b47cc971f308457c537f3a and b1dd3ded3589f6fa60ab85b3930a82d538edaeae. The patch modifies the marketplace.ts module to preserve logical paths instead of canonicalizing them via fs.realpath(), preventing path escape attacks. If immediate upgrade is not feasible, restrict access to OpenClaw's marketplace configuration and remote marketplace loading functionality using network-level controls or application firewall rules, though this may impact legitimate plugin installation workflows. Verify that any custom marketplace sources are hosted on trusted, controlled systems without symlinks that could be manipulated.