Vulnerability Description
OpenClaw versions prior to 2026.2.19 contain a path traversal vulnerability in the stageSandboxMedia function that accepts arbitrary absolute paths when iMessage remote attachment fetching is enabled. An attacker who can tamper with attachment path metadata can disclose files readable by the OpenClaw process on the configured remote host via SCP.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Openclaw | Openclaw | < 2026.2.19 |
Related Weaknesses (CWE)
References
- https://github.com/openclaw/openclaw/commit/1316e5740382926e45a42097b4bfe0aef7d6Patch
- https://github.com/openclaw/openclaw/security/advisories/GHSA-x9cf-3w63-rpq9MitigationVendor Advisory
- https://www.vulncheck.com/advisories/openclaw-sensitive-file-disclosure-via-stagThird Party Advisory
FAQ
What is CVE-2026-32030?
CVE-2026-32030 is a vulnerability with a CVSS score of 7.5 (HIGH). OpenClaw versions prior to 2026.2.19 contain a path traversal vulnerability in the stageSandboxMedia function that accepts arbitrary absolute paths when iMessage remote attachment fetching is enabled....
How severe is CVE-2026-32030?
CVE-2026-32030 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-32030?
Check the references section above for vendor advisories and patch information. Affected products include: Openclaw Openclaw.