CVE-2026-43570: OpenClaw 2026.3.22 < 2026.4.5 - Symlink Traversal in Remote Marketplace Repository Path Handling

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-05-05 · updated 2026-06-17
Weakness: CWE-61

Description

OpenClaw versions 2026.3.22 before 2026.4.5 contain a symlink traversal vulnerability in remote marketplace repository path handling that allows attackers to escape the expected repository root. Attackers can exploit this by providing crafted symlink paths to access files outside the intended repository directory.

Affected products

OpenClaw: from 2026.3.22 before 2026.4.5 — fixed in 2026.4.5

How to fix

Upgrade to a fixed version: OpenClaw 2026.4.5. Check the vendor advisory for mitigations.

References

https://github.com/openclaw/openclaw/commit/94b0062e90467e1582b47cc971f308457c537f3a
https://github.com/openclaw/openclaw/commit/b1dd3ded3589f6fa60ab85b3930a82d538edaeae
https://github.com/openclaw/openclaw/security/advisories/GHSA-cr8r-7g2h-6wr6
https://www.vulncheck.com/advisories/openclaw-symlink-traversal-in-remote-marketplace-repository-path-handling

Get alerted when CVE-2026-43570 or the next vulnerability affects your stack