Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-32013

OpenClaw versions prior to 2026.2.25 contain a symlink traversal vulnerability in the agents.files.get and agents.files.set methods that allows reading and writing files outside the agent workspace. Attackers can exploit symlinked allowlisted files to access arbitrary host files within gateway process permissions, potentially enabling code execution through file overwrite attacks.
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:775776efc0d183d9c23bf7f5c9a1de2f4a67673308533fa9e39b7fd2d4f473d0
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

cvss · 2 assertions

{"metric":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":8.7,"baseSeverity":"HIGH","exploitMaturity":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"H…

  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:45ddd33ddda289cec80a59b951b48970230300cb68615662681fec5934727921 · sha256:f8e8bfbb732926f6… · /containers/cna/metrics/0/cvssV4_0

{"metric":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}

  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:45ddd33ddda289cec80a59b951b48970230300cb68615662681fec5934727921 · sha256:f8e8bfbb732926f6… · /containers/cna/metrics/1/cvssV3_1

Affected products and versions

1 source assertion
{"defaultStatus":"unaffected","packageURL":"pkg:npm/openclaw","product":"OpenClaw","vendor":"OpenClaw","versions":[{"lessThan":"2026.2.25","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"2026.2.25","versionType":"semver"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:45ddd33ddda289cec80a59b951b48970230300cb68615662681fec5934727921 · sha256:f8e8bfbb732926f6… · /containers/cna/affected/0

Provider-owned CVSS observations

2 source assertions
{"metric":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":8.7,"baseSeverity":"HIGH","exploitMaturity":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"H…
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:45ddd33ddda289cec80a59b951b48970230300cb68615662681fec5934727921 · sha256:f8e8bfbb732926f6… · /containers/cna/metrics/0/cvssV4_0
{"metric":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:45ddd33ddda289cec80a59b951b48970230300cb68615662681fec5934727921 · sha256:f8e8bfbb732926f6… · /containers/cna/metrics/1/cvssV3_1

CWE assertions

1 source assertion
{"cweId":"CWE-59","description":"CWE-59: Improper Link Resolution Before File Access ('Link Following')","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:45ddd33ddda289cec80a59b951b48970230300cb68615662681fec5934727921 · sha256:f8e8bfbb732926f6… · /containers/cna/problemTypes/0/descriptions/0

Source references

3 source assertions
{"name":"Patch Commit","tags":["patch"],"url":"https://github.com/openclaw/openclaw/commit/125f4071bcbc0de32e769940d07967db47f09d3d"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:45ddd33ddda289cec80a59b951b48970230300cb68615662681fec5934727921 · sha256:f8e8bfbb732926f6… · /containers/cna/references/1
{"name":"GitHub Security Advisory (GHSA-fgvx-58p6-gjwc)","tags":["vendor-advisory"],"url":"https://github.com/openclaw/openclaw/security/advisories/GHSA-fgvx-58p6-gjwc"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:45ddd33ddda289cec80a59b951b48970230300cb68615662681fec5934727921 · sha256:f8e8bfbb732926f6… · /containers/cna/references/0
{"name":"VulnCheck Advisory: OpenClaw < 2026.2.25 - Symlink Traversal in agents.files Methods","tags":["third-party-advisory"],"url":"https://www.vulncheck.com/advisories/openclaw-symlink-traversal-in-agents-files-methods"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:45ddd33ddda289cec80a59b951b48970230300cb68615662681fec5934727921 · sha256:f8e8bfbb732926f6… · /containers/cna/references/2

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer