Improper access control in OpenClaw - #VU126450
Published: April 17, 2026
Vulnerability identifier: #VU126450
CSH Severity: Low
CVSS v4: 5.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: N/A
CWE-ID: CWE-284
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote user to disclose sensitive information.
The vulnerability exists due to improper access control in the QMD backend memory_get read path when handling workspace Markdown path requests. A remote user can supply a workspace Markdown path outside the canonical memory locations or indexed QMD result set to disclose sensitive information.
The issue is limited to Markdown files under the configured workspace root and requires the QMD backend to be enabled.
Affected software
OpenClaw
Remediation
Install security update from vendor's website.
OpenClaw - update to 2026.4.15