UNIX symbolic link following in OpenClaw - #VU125170
Published: April 8, 2026
Vulnerability identifier: #VU125170
CSH Severity: Low
CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N]
CVE-ID: N/A
CWE-ID: CWE-61
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to append attacker-controlled content to arbitrary files on the system.
The vulnerability exists due to unix symbolic link following in agents.create and agents.update handlers when appending to IDENTITY.md in the agent workspace. A local user can place a symlink at the IDENTITY.md path and invoke the affected API methods to append attacker-controlled content to arbitrary files on the system.
The issue occurs because an existing symlink at the IDENTITY.md path is not prevented from being followed during the append operation.
Affected software
OpenClaw
Remediation
Install update from vendor's website.
OpenClaw - update to 2026.2.23