CVE-2026-32030CWE-22

OpenClaw < 2026.2.19 - Sensitive File Disclosure via stageSandboxMedia Path Traversal

High · published March 19, 2026

CVSS v4.0
8.2
EPSS
1%
Percentile
44.0
In the wild
Unconfirmed
What it is

OpenClaw versions prior to 2026.2.19 contain a path traversal vulnerability in the stageSandboxMedia function that accepts arbitrary absolute paths when iMessage remote attachment fetching is enabled. An attacker who can tamper with attachment path metadata can disclose files readable by the OpenClaw process on the configured remote host via SCP.

The record
Technical detail
CVSS v4.0
8.2 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00531 · 44.0th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2026-03-19T22:07Z
EPSS history
Timeline
  • 19 MAR 22:07Z
    OpenClaw < 2026.2.19 - Sensitive File Disclosure via stageSandboxMedia Path Traversal
    cvelistv5