GitHub Advisoryadvisory · npm

GHSA-rx3g-mvc3-qfjf OpenClaw's avatar symlink traversal can expose out-of-workspace local files

MEDIUM Published 2026-03-03 Modified 2026-03-20 Official page ↗
Aliases
CVE-2026-32024
Ecosystem
npm
Packages
openclaw
Severity
Moderate
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-22, CWE-59
Reviewed
2026-03-03

Affected packages

• npm openclaw: < 2026.2.22 → fixed in 2026.2.22

Description

Summary OpenClaw avatar handling allowed a symlink traversal path that could expose local files outside an agent workspace through gateway avatar surfaces. Affected Packages / Versions • Package: `openclaw` (npm) • Affected versions: `= 2026.2.22` so after npm release, the remaining action is to publish this advisory. Impact Confidentiality impact only: local files readable by the OpenClaw process could be disclosed via avatar response surfaces. OpenClaw thanks @tdjackey for reporting.

Related

Alias · CVE (1)

  • CVE-2026-32024 OpenClaw versions prior to 2026.2.22 contain a symlink traversal vulnerability in avatar handling that allows attackers to read arbitrary… vulnerability

Weakness · CWE (2)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
  • CWE-59 Improper Link Resolution Before File Access weakness

References