A local information disclosure vulnerability in OpenClaw allows unauthorized users to access sensitive session data and secrets due to insecure file permission defaults.

This vulnerability involves the creation of temporary session transcript files with insecure default permissions (CWE-378). Any authenticated local user on the system can read these files to extract sensitive information or secrets generated during tool execution.

The exposure of session transcripts poses a significant risk to organizational security, as these files often contain plain-text credentials, API keys, or proprietary configuration data. While the vulnerability requires local access, its impact is high because it facilitates lateral movement and privilege escalation by harvesting secrets. The CVSS score of 8.4 reflects the potential for severe data compromise within the local environment.

Immediate Action: Update the OpenClaw package to version 2026.2.17 or later to implement secure file permission handling.

Proactive Monitoring: Audit existing session transcript directories for broad read access permissions and review system access logs for unauthorized attempts to access temporary file locations.

Compensating Controls: Implement strict file system permissions on the directory housing transcript logs to restrict access to the service account executing OpenClaw.

Public Exploit Available: Unknown

Given the ease with which sensitive secrets can be extracted from these logs, administrators should prioritize updating OpenClaw immediately. Until the patch is applied, ensure that access to the server is strictly controlled and that sensitive session logs are purged or protected by restricted directory permissions.