Path traversal in OpenClaw - CVE-2026-100536
Published: November 3, 2026
Vulnerability identifier: #VU158796
CSH Severity: Low
CVSS v4: 7.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-100536
CWE-ID: CWE-22
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote user to disclose host files outside the sandbox through Telegram attachment delivery.
The vulnerability exists due to incomplete path validation in OpenClaw's structured message attachment handling when processing attachments with multiple populated source fields. A remote user can place an out-of-sandbox host path behind an allowed attachment source to cause Telegram delivery to read and send a host file, because validation checks only the first populated source while delivery processes every populated source.
Exploitation requires a known, useful host file path and an allowed Telegram delivery target. The vulnerability does not provide general filesystem listing.
Affected software
OpenClaw
How to mitigate CVE-2026-100536
Install security update from vendor's website.
OpenClaw - update to 2026.8.1