Arbitrary File Read Vulnerability in OpenClaw Package
Summary
GHSA-56pc-6hvp-4gv4: OpenClaw vulnerable to arbitrary file read via $include directive. Affects openclaw versions < 2026.2.17. Fixed in 2026.2.17. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
OpenClaw is an open-source package designed for managing configurations and includes directives for file inclusion. It allows users to include external files within its configuration, enhancing flexibility. However, this functionality can be exploited if not properly secured, leading to potential unauthorized access to sensitive files on the server.
Vulnerability Detail
The vulnerability arises from a path traversal issue in the configuration's $include directive, which allows attackers to read arbitrary files outside the designated config directory. If an attacker can modify the OpenClaw configuration, they can set the $include directive to absolute paths or use traversal paths to escape the config directory. This can lead to exposure of sensitive information, such as API keys and private configuration data, depending on the file permissions of the OpenClaw process user.
How To Fix
Latest published version: 2026.10.6 as of 22 Oct 2026
npm install openclaw@2026.10.6Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
2026.2.17
This is the first release that contains the fix.
npm install openclaw@2026.2.17Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, ensure that the OpenClaw configuration is not modifiable by untrusted users. Additionally, avoid using symlinks within the config directory that could point to external files.
Conclusion
The OpenClaw package has a significant vulnerability that allows for arbitrary file reads due to a path traversal issue in the $include directive. Users are advised to update to version 2026.2.17 or later to secure their applications. For ongoing monitoring, consider using Vulert to stay informed about vulnerabilities.
See every vulnerability recorded for openclaw →
FAQ
The vulnerability is a path traversal issue that allows arbitrary file reads via the $include directive in the configuration.
You can check if your application is affected by using Vulert, which monitors and alerts for open-source vulnerabilities in real-time. Visit Vulert Scanner to analyze your package-lock.json.
Exploiting this vulnerability can lead to unauthorized access to sensitive files, including API keys and private configuration data, depending on the permissions of the OpenClaw process user.
Yes, a patched version (2026.2.17) is available. Users should update to this version to mitigate the vulnerability.
If immediate updating is not possible, restrict access to the OpenClaw configuration and avoid using symlinks that could lead to external file access.
References
Related vulnerabilities
Recent vulnerabilities recorded for openclaw.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.