CVE-2026-28462
criticalpriority · track · 36EPSS 0.004 · 38 %ileDEEUUSEPSS · scored 2026-10-27
OpenClaw versions prior to 2026.2.13 contain a vulnerability in the browser control API in which it accepts user-supplied output paths for trace and download files without consistently constraining writes to temporary directories. Attackers with API access can exploit path traversal in POST /trace/stop, POST /wait/download, and POST /download endpoints to write files outside intended temp roots.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–critical · 6.6–9.1
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (5)
Products and version ranges known to be affected.
advisories (2)
Vendor and ecosystem advisories describing this.
- WID-SEC-W-2026-0424OpenClaw: Mehrere SchwachstellenDeutsch2026-02-15csaf · cert_bundDE
Ein Angreifer kann diese Schwachstellen in OpenClaw ausnutzen, um beliebigen Programmcode auszuführen, sich erhöhte Berechtigungen zu verschaffen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen oder andere, nicht näher bezeichnete Angriffe durchzuführen.
- GHSA-gq9c-wg68-gwj2OpenClaw has a path traversal in browser trace/download output paths may allow arbitrary file writes2026-02-18ghsa · osvUS
## Summary OpenClaw’s browser control API accepted user-supplied output paths for trace/download files without consistently constraining writes to OpenClaw-managed temporary directories. ## Impact If an attacker can access the browser control API, they could attempt to write trace/download output files outside intended temp roots, depending on process filesystem permissions. ## Affected versions `openclaw` `< 2026.2.13` ## Fixed versions `openclaw` `>= 2026.2.13` ## Remediation Upgrade to `2026.2.13` or later. ## What changed The fix constrains output paths for: - `POST /trace/stop` - `POST /wait/download` - `POST /download` All three now enforce OpenClaw temp-root boundaries and reject traversal/escape paths. ## Credits Thanks to Adnan Jakati (@jackhax) of Praetorian for responsible disclosure. Fix shipped in PR #15652 and merged to `main` on February 13, 2026 (`7f0489e4731c8d965d78d6eac4a60312e46a9426`). --- Fix commit 7f0489e4731c8d965d78d6eac4a60312e46a9426 confirmed on main and in v2026.2.14. Upgrade to `openclaw >= 2026.2.13`.
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (10)
External citations — patches, advisories, analysis.
- https://github.com/openclaw/openclaw/commit/7f0489e4731c8d965d78d6eac4a60312e46a9426cnnvd
- https://github.com/openclaw/openclaw/releasesPatchcnnvd
- https://github.com/openclaw/openclaw/security/advisories/GHSA-gq9c-wg68-gwj2cnnvd
- https://www.vulncheck.com/advisories/openclaw-path-traversal-in-trace-and-download-output-pathscnnvd
- https://github.com/openclaw/openclaw/commit/7f0489e4731c8d965d78d6eac4a60312e46a9426enisa_euvd
- https://github.com/openclaw/openclaw/security/advisories/GHSA-gq9c-wg68-gwj2enisa_euvd
- https://www.vulncheck.com/advisories/openclaw-path-traversal-in-trace-and-download-output-pathsenisa_euvd
- https://github.com/openclaw/openclaw/commit/7f0489e4731c8d965d78d6eac4a60312e46a9426Patchnvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan