What is the CVSS score of EUVD-2026-13019?

EUVD-2026-13019 has a CVSS 3.1 base score of 6.1 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L. EPSS exploitation probability: 0.0%.

Which versions of Openclaw are affected by EUVD-2026-13019?

CVE-2026-31990 presents moderate security risk rated CVSS 6.1. Exploitation could compromise the security of affected deployments.. A patch is available.

How to fix or mitigate EUVD-2026-13019?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Vendor patch is available.

Openclaw EUVD-2026-13019

| CVE-2026-31990 MEDIUM

Improper Link Resolution Before File Access (CWE-59)

2026-03-19 VulnCheck

GHSA-cfvj-7rx7-fc7c

Information Disclosure Openclaw

6.1

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

6.1 MEDIUM

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

Low

Lifecycle Timeline

EUVD ID Assigned

Mar 19, 2026 - 01:30 euvd

EUVD-2026-13019

Analysis Generated

Mar 19, 2026 - 01:30 vuln.today

Patch released

Mar 19, 2026 - 01:30 nvd

Patch available

CVE Published

Mar 19, 2026 - 01:00 nvd

MEDIUM 6.1

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

4 npm packages depend on openclaw (4 direct, 0 indirect)

Ecosystem-wide dependent count for version 2026.3.2.

DescriptionCVE.org

OpenClaw versions prior to 2026.3.2 contain a vulnerability in the stageSandboxMedia function in which it fails to validate destination symlinks during media staging, allowing writes to follow symlinks outside the sandbox workspace. Attackers can exploit this by placing symlinks in the media/inbound directory to overwrite arbitrary files on the host system outside sandbox boundaries.

AnalysisAI

OpenClaw versions prior to 2026.3.2 contain a symlink traversal vulnerability in the stageSandboxMedia function that fails to validate destination symlinks during media staging operations. This allows local attackers with low privileges to write files outside the intended sandbox workspace by placing malicious symlinks in the media/inbound directory, resulting in arbitrary file overwrite on the host system. A patch is available from the vendor, and the vulnerability was reported by VulnCheck with public references including a GitHub security advisory and commit fix.

Technical ContextAI

The vulnerability is rooted in CWE-59 (Improper Link Resolution Before File Access), a class of issues where applications fail to properly validate symlink targets before performing file operations. OpenClaw's stageSandboxMedia function processes media files placed in the media/inbound directory but does not adequately check whether destination paths are symlinks pointing outside the intended sandbox boundary. The affected product is identified via CPE cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:*, affecting all versions before 2026.3.2. This is a classic sandbox escape mechanism where an attacker leverages improper symlink resolution to violate isolation boundaries and gain write access to arbitrary filesystem locations on the host system.

RemediationAI

Upgrade OpenClaw to version 2026.3.2 or later immediately, as a patch from the vendor is available. The specific patched commit can be reviewed at https://github.com/openclaw/openclaw/commit/17ede52a4be3034f6ec4b883ac6b81ad0101558a to understand the fix (symlink validation in the stageSandboxMedia function). Until patching is completed, restrict filesystem permissions on the media/inbound directory to prevent untrusted users from creating symlinks, enforce principle of least privilege for service accounts running OpenClaw, and monitor for suspicious symlink creation in sandbox directories. Additionally, audit existing media/inbound directories for pre-existing malicious symlinks that could persist across updates.