Local File Read Vulnerability in OpenClaw: Memory-Wiki Ingest with Operator.Write Scope
Summary
GHSA-p2fh-f5fc-44hr: OpenClaw: memory-wiki ingest could read local files with operator.write scope. Affects openclaw versions < 2026.5.12. Fixed in 2026.5.12. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
OpenClaw is an open-source tool designed for managing and ingesting data into a memory-wiki format. It allows operators to write and manage content efficiently. However, a recent vulnerability has been identified that permits unauthorized access to local files when certain configurations are enabled, posing a risk to data integrity and security.
Vulnerability Detail
The vulnerability arises from the memory-wiki ingest feature, which, when enabled, allows a Gateway caller with 'operator.write' access to read arbitrary local file paths. This could lead to the importation of sensitive local file content into the wiki memory, depending on the operator's configuration and the accessibility of lower-trust inputs. The issue is classified under CWE-732, indicating improper permissions management.
How To Fix
Latest published version: 2026.10.6 as of 22 Oct 2026
npm install openclaw@2026.10.6Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
2026.5.12
This is the first release that contains the fix.
npm install openclaw@2026.5.12Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, limit memory-wiki write access to trusted operators until a patch is applied. Additionally, consider disabling the affected feature if it is not necessary for your operations.
Conclusion
In summary, the OpenClaw memory-wiki ingest vulnerability allows unauthorized access to local files under certain configurations. It is crucial to update to the latest patched version and implement the recommended workarounds to mitigate risks. Regular monitoring with tools like Vulert can help maintain security.
See every vulnerability recorded for openclaw →
FAQ
The vulnerability allows unauthorized reading of local files through the memory-wiki ingest feature when configured with operator.write access.
If you are using a version prior to 2026.5.12, you are at risk. Check your package-lock.json file or run npm list openclaw to verify your version.
The vulnerability could lead to unauthorized access to sensitive local files, which may compromise data integrity and security.
Yes, you can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time using just your package-lock.json file. You can check your application for vulnerabilities without needing to install anything.
The CVSS score for this vulnerability is 6.5, indicating a moderate level of risk.
References
Related vulnerabilities
Recent vulnerabilities recorded for openclaw.
