Incorrect Behavior Order: Validate Before Canonicalize in OpenClaw - CVE-2026-100547
Published: November 9, 2026 / Updated: November 10, 2026
Vulnerability identifier: #VU163193
CSH Severity: Medium
CVSS v4: 6.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-100547
CWE-ID: CWE-180
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows an unauthenticated local attacker to read host files outside the session working directory without approval.
The vulnerability exists due to OpenClaw's ACP client treating alternate valid file: URL spellings as relative paths during working-directory approval checks. An unauthenticated local attacker controlling an ACP peer can submit these URLs to obtain file contents when an operator connects the OpenClaw ACP client to that peer.
Affected software
OpenClaw
How to mitigate CVE-2026-100547
Install security update from vendor's website.
OpenClaw - update to 2026.8.1