What’s Vulnerable › Vulnerabilities

CVE-2026-35668: OpenClaw < 2026.3.24 - Sandbox Media Root Bypass via Unnormalized mediaUrl and fileUrl Parameters

• Severity: high (CVSS 7.7 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2026-04-10 · updated 2026-06-17
• Weakness: CWE-22

Description

OpenClaw before 2026.3.24 contains a path traversal vulnerability in sandbox enforcement allowing sandboxed agents to read arbitrary files from other agents' workspaces via unnormalized mediaUrl or fileUrl parameter keys. Attackers can exploit incomplete parameter validation in normalizeSandboxMediaParams and missing mediaLocalRoots context to access sensitive files including API keys and configuration data outside designated sandbox roots.

Affected products

• OpenClaw: before 2026.3.24 — fixed in 2026.3.24

How to fix

Upgrade to a fixed version: OpenClaw 2026.3.24. Check the vendor advisory for mitigations.

References

• https://github.com/openclaw/openclaw/security/advisories/GHSA-hr5v-j9h9-xjhg
• https://www.vulncheck.com/advisories/openclaw-sandbox-media-root-bypass-via-unnormalized-mediaurl-and-fileurl-parameters

Get alerted when CVE-2026-35668 or the next vulnerability affects your stack