What’s Vulnerable › Vulnerabilities

CVE-2026-44996: OpenClaw < 2026.4.15 - Arbitrary Local File Read via Webchat Audio Embedding

• Severity: low (CVSS 3.7 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-05-11 · updated 2026-06-17
• Weakness: CWE-22

Description

OpenClaw before 2026.4.15 contains an arbitrary local file read vulnerability in the webchat audio embedding helper that fails to apply local media root containment checks. Attackers can influence agent or tool-produced ReplyPayload.mediaUrl parameters to resolve absolute local paths or file URLs, read audio-like files, and embed them base64-encoded into webchat responses.

Affected products

• OpenClaw: before 2026.4.15 — fixed in 2026.4.15

How to fix

Upgrade to a fixed version: OpenClaw 2026.4.15. Check the vendor advisory for mitigations.

References

• https://github.com/openclaw/openclaw/commit/6e58f1f9f54bca1fea1268ec0ee4c01a2af03dde
• https://github.com/openclaw/openclaw/security/advisories/GHSA-gfg9-5357-hv4c
• https://www.vulncheck.com/advisories/openclaw-arbitrary-local-file-read-via-webchat-audio-embedding

Get alerted when CVE-2026-44996 or the next vulnerability affects your stack