CVE-2026-32013 is a high-severity symlink traversal vulnerability affecting OpenClaw versions prior to 2026.2.25. This flaw exists in the agents.files.get and agents.files.set methods, allowing attackers to read and write files outside the agent's designated workspace. With a CVSS score of 8.8 (High), the vulnerability can be exploited remotely with low privileges and no user interaction, potentially leading to arbitrary host file access and code execution through file overwrite attacks. While there are no public exploits in Metasploit or ExploitDB, and it is not listed in CISA's KEV, media coverage notes an incomplete fix for this vulnerability, indicating continued relevance.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 0, < 2026.2.25CPE match | cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:* | ||
< 2026.2.25CPE matchmatch criteria | cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:* |
CVSS version used by this source: 4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.3 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.