Session Transcript File Permission Vulnerability in OpenClaw
Summary
GHSA-vr7j-g7jv-h5mp: OpenClaw session transcript files were created without forced user-only permissions. Affects openclaw versions < 2026.2.17. Fixed in 2026.2.17. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
OpenClaw is an open-source tool designed for session management and transcript recording in various applications. It allows users to create and manage session transcripts in JSONL format, which can include sensitive information. The package is widely used in multi-user environments, making security a critical aspect of its functionality. However, a vulnerability was discovered that allowed session transcript files to be created with overly broad permissions, potentially exposing sensitive data to unauthorized users.
Vulnerability Detail
The vulnerability arises from OpenClaw creating session transcript JSONL files without enforcing user-only permissions. In affected versions (<= 2026.2.15), these files could be accessed by other local users or processes on multi-user systems, leading to unauthorized access to sensitive information. The issue is rooted in the file permission settings during the creation of transcript files, which did not default to secure permissions, allowing for potential data leaks.
How To Fix
Latest published version: 2026.10.6 as of 22 Oct 2026
npm install openclaw@2026.10.6Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
2026.2.17
This is the first release that contains the fix.
npm install openclaw@2026.2.17Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can manually adjust the permissions of existing transcript files using the following command in the terminal: chmod 600 path/to/transcript.jsonl. This command will restrict access to the file owner only until the package is updated.
Conclusion
The OpenClaw session transcript file permission vulnerability poses a significant risk in multi-user environments by allowing unauthorized access to sensitive data. Users are strongly advised to update to the latest version to mitigate this risk and ensure secure handling of session transcripts.
See every vulnerability recorded for openclaw →
FAQ
Versions of OpenClaw up to and including 2026.2.15 are affected by this vulnerability.
The CVSS score of this vulnerability is 5.7, indicating a moderate severity level.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
The potential consequences include unauthorized access to sensitive information contained in session transcripts, which could lead to data breaches or privacy violations.
Vulert monitors and alerts in real-time for open-source vulnerabilities using just the package-lock.json file, providing a simple and effective way to stay informed about security issues.
References
Related vulnerabilities
Recent vulnerabilities recorded for openclaw.
