CVE-2026-43570: OpenClaw Symlink Traversal Vulnerability
Summary
CVE-2026-43570: OpenClaw contains a symlink traversal vulnerability. Affects openclaw versions >= 2026.3.22, < 2026.4.5. Fixed in 2026.4.5. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
OpenClaw is an open-source package available on npm that facilitates the management of remote marketplace repositories. It allows users to interact with various marketplace functionalities, providing a streamlined experience for developers. However, certain versions of OpenClaw are vulnerable to a symlink traversal issue, which can lead to unauthorized access to sensitive files outside the intended directory structure.
Vulnerability Detail
OpenClaw versions 2026.3.22 before 2026.4.5 contain a symlink traversal vulnerability in the handling of remote marketplace repository paths. This flaw allows attackers to craft symlink paths that can escape the expected repository root, potentially exposing sensitive files and data. The vulnerability is classified under CWE-61, indicating a weakness in the handling of symbolic links, which can have serious implications for data security and integrity.
How To Fix
Latest published version: 2026.10.6 as of 22 Oct 2026
npm install openclaw@2026.10.6Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
2026.4.5
This is the first release that contains the fix.
npm install openclaw@2026.4.5Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, avoid using symlink paths in your repository configurations until you can update to the patched version. Additionally, consider implementing access controls to restrict unauthorized access to sensitive files.
Conclusion
The symlink traversal vulnerability in OpenClaw poses a significant risk to applications using affected versions. It is crucial to update to the patched version to mitigate potential security threats. Utilizing tools like Vulert can help monitor and alert for such vulnerabilities in real-time.
See every vulnerability recorded for openclaw →
FAQ
A symlink traversal vulnerability allows an attacker to create a symbolic link that points to a location outside the intended directory, potentially exposing sensitive files.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
Exploitation of this vulnerability could lead to unauthorized access to sensitive files, which may compromise the security and integrity of your application.
Yes, the CVSS score for this vulnerability is 6.5, indicating a moderate severity level.
If you cannot update immediately, implement access controls to limit exposure and avoid using symlink paths in your configurations.
References
Related vulnerabilities
Recent vulnerabilities recorded for openclaw.
