An arbitrary file read vulnerability in OpenClaw before version 2026.4.10 allows unauthenticated remote attackers to disclose sensitive host-local files through crafted QQBot media tags.

This flaw is a relative path traversal (CWE-23) residing in the QQBot media handling functionality, triggered by unauthenticated attackers supplying specially crafted reply text that bypasses intended storage boundaries.

A successful exploit exposes sensitive configuration files, system credentials, or proprietary source code residing on the host operating system, potentially leading to total compromise of confidentiality. With a CVSS score of 8.6, this vulnerability represents a severe risk that requires immediate mitigation to prevent unauthorized data exfiltration.

Immediate Action: Update the OpenClaw package to version 2026.4.10 or later using npm.

Proactive Monitoring: Monitor outbound network traffic and application access logs for anomalous requests involving QQBot media handling or unexpected local file access patterns.

Compensating Controls: Deploy a Web Application Firewall or input validation filter to inspect incoming message payloads for path traversal sequences targeting media tags.

Public Exploit Available: No - no confirmed public exploit in the available data.

Given the high CVSS score and the risk of unauthenticated file disclosure, administrators must prioritize updating OpenClaw to the patched release. Prompt application of the update ensures the removal of the vulnerable media tag handling logic and protects critical host assets from unauthorized access.