CVE-2026-32013
OpenClaw < 2026.2.25 - Symlink Traversal in agents.files Methods
概要
OpenClaw < 2026.2.25 - Symlink Traversal in agents.files Methods
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
OpenClaw versions prior to 2026.2.25 contain a symlink traversal vulnerability in the agents.files.get and agents.files.set methods that allows reading and writing files outside the agent workspace. Attackers can exploit symlinked allowlisted files to access arbitrary host files within gateway process permissions, potentially enabling code execution through file overwrite attacks.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- advisory vulncheck.com
- patch github.com