CVE-2026-32013 - Vulnerability Analysis

Overview

OpenClaw < 2026.2.25 contains a symlink traversal vulnerability in agents.files.get and agents.files.set methods, letting attackers read/write files outside the agent workspace and potentially execute code via file overwrite.

Severity & Score

Impact

Attackers can read/write arbitrary host files and potentially execute code, leading to full system compromise within gateway process permissions.

Mitigation

Update to version 2026.2.25 or later.

References

• https://github.com/openclaw/openclaw/commit/125f4071bcbc0de32e769940d07967db47f09d3d
• https://github.com/openclaw/openclaw/security/advisories/GHSA-fgvx-58p6-gjwc
• https://www.vulncheck.com/advisories/openclaw-symlink-traversal-in-agents-files-methods

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Mar 19, 2026

🟠 CVE-2026-32013 - High (8.8) OpenClaw versions prior to 2026.2.25 contain a symlink traversal vulnerability in the agents.files.get and agents.files.set methods that allows reading and writing files outside the agent workspace. Attackers can exploit symlinked allowlisted file... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-32013/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner