A path traversal vulnerability in OpenClaw allows authenticated sandboxed agents to access sensitive files outside their designated directories, posing a high risk to data confidentiality.

This is a path traversal vulnerability (CWE-22) caused by incomplete parameter validation in the normalizeSandboxMediaParams function and missing mediaLocalRoots context. An authenticated agent can exploit this to read arbitrary files, including API keys and configuration data, by manipulating unnormalized mediaUrl or fileUrl parameters.

The vulnerability allows for unauthorized access to sensitive information stored on the affected system, which could lead to a compromise of credentials or configuration secrets. With a CVSS score of 7.7, this flaw represents a high-severity risk that could facilitate further lateral movement or privilege escalation within the environment. Failure to remediate could result in the exposure of internal data to malicious actors who have gained access to a sandboxed agent.

Immediate Action: Update the OpenClaw package to version 2026.3.24 or later to resolve the sandbox bypass.

Proactive Monitoring: Review access logs for unusual patterns involving mediaUrl or fileUrl parameters, specifically monitoring for directory traversal sequences like double dots or unexpected file system paths.

Compensating Controls: Implement strict input validation at the application firewall level to block requests containing path traversal sequences directed toward the vulnerable media parameters.

Public Exploit Available: No (the enrichment data confirms a proof-of-concept existence via CISA SSVC, but no weaponized exploit or public PoC repository is confirmed).

Given the ability of this vulnerability to bypass sandbox restrictions and expose sensitive configuration data, organizations should prioritize patching as a critical security measure. Update all instances of OpenClaw to version 2026.3.24 immediately to ensure proper enforcement of path constraints and prevent unauthorized file access.