What is the CVSS score of EUVD-2026-12726?

EUVD-2026-12726 has a CVSS 3.1 base score of 5.3 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L. EPSS exploitation probability: 0.0%.

Which versions of Openclaw are affected by EUVD-2026-12726?

CVE-2026-22180 presents moderate security risk rated CVSS 5.3. Exploitation could compromise the security of affected deployments.. A patch is available.

How to fix or mitigate EUVD-2026-12726?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Vendor patch is available.

Openclaw EUVD-2026-12726

| CVE-2026-22180 MEDIUM

Improper Link Resolution Before File Access (CWE-59)

2026-03-18 VulnCheck

GHSA-3pxq-f3cp-jmxp

Authentication Bypass Canonical Openclaw

5.3

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.3 MEDIUM

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

Low

Lifecycle Timeline

EUVD ID Assigned

Mar 18, 2026 - 02:30 euvd

EUVD-2026-12726

Analysis Generated

Mar 18, 2026 - 02:30 vuln.today

Patch released

Mar 18, 2026 - 02:30 nvd

Patch available

CVE Published

Mar 18, 2026 - 01:34 nvd

MEDIUM 5.3

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

4 npm packages depend on openclaw (4 direct, 0 indirect)

Ecosystem-wide dependent count for version 2026.3.2.

DescriptionCVE.org

OpenClaw versions prior to 2026.3.2 contain a path-confinement bypass vulnerability in browser output handling that allows writes outside intended root directories. Attackers can exploit insufficient canonical path-boundary validation in file write operations to escape root-bound restrictions and write files to arbitrary locations.

AnalysisAI

OpenClaw prior to version 2026.3.2 allows local users with standard privileges to write files outside designated directories through insufficient path validation in the browser output handler. An attacker can exploit this path-confinement bypass to place malicious files in arbitrary filesystem locations, potentially leading to privilege escalation or system compromise.

Technical ContextAI

The vulnerability affects OpenClaw (CPE: cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:*) and is classified under CWE-59 (Improper Link Resolution Before File Access, also known as 'Link Following'). The root cause involves insufficient validation of canonical file paths in browser output handling mechanisms, allowing attackers to bypass directory confinement checks through path traversal sequences (e.g., ../ or similar bypass techniques). The flaw exists in the file write operations that are intended to confine output to a specific root directory but fail to properly normalize and validate user-supplied paths before performing filesystem operations.

RemediationAI

Upgrade OpenClaw to version 2026.3.2 or later immediately; the vendor has released a patch available at https://github.com/openclaw/openclaw/commit/104d32bb64cdf19d5e77f70553a511a2ae90ad1c. Organizations unable to patch immediately should restrict local system access to OpenClaw installations to trusted administrators only, disable unnecessary local user accounts with OpenClaw access, and implement filesystem-level access controls (e.g., SELinux or AppArmor) to confine OpenClaw process writes to intended directories. Monitor file access logs for suspicious write operations outside the configured root directory.