Vulnerability Description
OpenClaw versions prior to 2026.2.22 contain a path traversal vulnerability in the static file handler that follows symbolic links, allowing out-of-root file reads. Attackers can place symlinks under the Control UI root directory to bypass directory confinement checks and read arbitrary files outside the intended root.
CVSS Score
LOW
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Openclaw | Openclaw | < 2026.2.22 |
Related Weaknesses (CWE)
References
- https://github.com/openclaw/openclaw/commit/7c500ff6236fa087ec1ec88696ca9f6881e9Patch
- https://github.com/openclaw/openclaw/security/advisories/GHSA-5ghc-98wh-gwwfVendor Advisory
- https://www.vulncheck.com/advisories/openclaw-arbitrary-file-read-via-symlink-foThird Party Advisory
FAQ
What is CVE-2026-32020?
CVE-2026-32020 is a vulnerability with a CVSS score of 3.3 (LOW). OpenClaw versions prior to 2026.2.22 contain a path traversal vulnerability in the static file handler that follows symbolic links, allowing out-of-root file reads. Attackers can place symlinks under ...
How severe is CVE-2026-32020?
CVE-2026-32020 has been rated LOW with a CVSS base score of 3.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-32020?
Check the references section above for vendor advisories and patch information. Affected products include: Openclaw Openclaw.