Improper access control in OpenClaw - #VU126450
Published: April 17, 2026
Vulnerability identifier: #VU126450
CSH Severity: Low
CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: N/A
CWE-ID: CWE-284
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vendor: OpenClaw
Affected software:
OpenClaw
OpenClaw
Detailed vulnerability description
The vulnerability allows a remote user to disclose sensitive information.
The vulnerability exists due to improper access control in the QMD backend memory_get read path when handling workspace Markdown path requests. A remote user can supply a workspace Markdown path outside the canonical memory locations or indexed QMD result set to disclose sensitive information.
The issue is limited to Markdown files under the configured workspace root and requires the QMD backend to be enabled.
Remediation
Install security update from vendor's website.