Vulnerabilities

TI-2026-21927 CVE-2026-27523 · GHSA-m8v2-6wwh-r4gc

OpenClaw < 2026.2.24 - Sandbox Bind Validation Bypass via Symlink-Parent Missing-Leaf Paths

LOW 30

OpenClaw versions prior to 2026.2.24 contain a sandbox bind validation vulnerability allowing attackers to bypass allowed-root and blocked-path checks via symlinked parent directories with non-existent leaf paths.

CVSS 4.0MEDIUM 6.9 Local Low privileges No interaction EPSS 0.0027 Published 2026-03-18 Fixed in 2026.2.24 CWE-22

TI-2026-21926 CVE-2026-27522 · GHSA-fqcm-97m6-w7rm

OpenClaw < 2026.2.24 - Arbitrary File Read via sendAttachment and setGroupIcon Message Actions

LOW 31

OpenClaw versions prior to 2026.2.24 contain a local media root bypass vulnerability in sendAttachment and setGroupIcon message actions when sandboxRoot is unset.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00395 Published 2026-03-18 Fixed in 2026.2.24 CWE-22

Vulnerabilities

Filters

OpenClaw < 2026.2.24 - Sandbox Bind Validation Bypass via Symlink-Parent Missing-Leaf Paths

OpenClaw < 2026.2.24 - Arbitrary File Read via sendAttachment and setGroupIcon Message Actions