High severity · published Mar 19, 2026
CVE-2026-32024
OpenClaw < 2026.2.22 - Symlink Traversal in Avatar Handling
7.5
CVSS
0.3%
EPSS
No
On KEV
Description
OpenClaw versions prior to 2026.2.22 contain a symlink traversal vulnerability in avatar handling that allows attackers to read arbitrary files outside the configured workspace boundary. Remote attackers can exploit this by requesting avatar resources through gateway surfaces to disclose local files accessible to the OpenClaw process.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 27% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OP
OpenClaw · OpenClaw
before 2026.2.22 · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-32024
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-32024
Patch
https://github.com/openclaw/openclaw/commit/3d0337504349954237d09e4d957df5cb844d5e77
Patch
https://github.com/openclaw/openclaw/commit/6970c2c2db3ee069ef0fff0ade5cfbdd0134f9d2
Vendor Advisory
https://github.com/openclaw/openclaw/security/advisories/GHSA-rx3g-mvc3-qfjf
Third Party Advisory
https://www.vulncheck.com/advisories/openclaw-symlink-traversal-in-avatar-handling
More from OpenClaw
9.9
CVE-2026-41329
OpenClaw < 2026.3.31 - Sandbox Bypass via Heartbeat Context Inheritance and senderIsOwner Escalation
9.9
CVE-2026-33579
OpenClaw < 2026.3.28 - Privilege Escalation via Missing Caller Scope Validation in Device Pair Approval
9.9
CVE-2026-32922
OpenClaw < 2026.3.11 - Privilege Escalation via Unvalidated Scope in device.token.rotate
9.9
CVE-2026-32048
OpenClaw < 2026.3.1 - Sandbox Escape via Cross-Agent sessions_spawn
9.9
CVE-2026-22172
OpenClaw < 2026.3.12 - Scope Elevation in WebSocket Shared-Auth Connections