https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T02:44:46.271235+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/brew-openclaw-cli-cve-2026-28462 BREW-openclaw-cli-CVE-2026-28462 — OpenClaw has a path traversal in browser trace/download output paths may allow arbitrary file writes 2026-10-04T02:44:46.275319+00:00

Affected: Homebrew: openclaw-cli

## Summary

OpenClaw’s browser control API accepted user-supplied output paths for trace/download files without consistently constraining writes to OpenClaw-managed temporary directories.

## Impact

If an attacker can access the browser control API, they could attempt to write trace/download output files outside intended temp roots, depending on process filesystem permissions.

## Affected versions

`openclaw` `< 2026.2.13`

## Fixed versions

`openclaw` `>= 2026.2.13`

## Remediation

Upgrade to `2026.2.13` or later.

## What changed

The fix constrains output paths for:

- `POST /trace/stop` - `POST /wait/download` - `POST /download`

All three now enforce OpenClaw temp-root boundaries and reject traversal/escape paths.

## Credits

Thanks to Adnan Jakati (@jackhax) of Praetorian for responsible disclosure.

Fix shipped in PR #15652 and merged to `main` on February 13, 2026 (`7f0489e4731c8d965d78d6eac4a60312e46a9426`).

---

Fix commit 7f0489e4731c8d965d78d6eac4a60312e46a9426 confirmed on main and in v2026.2.14. Upgrade to `openclaw >= 2026.2.13`.

 https://cve.radiocsirt.org/vuln/cnvd-2026-14392 cnvd-2026-14392 2026-10-04T02:44:46.275391+00:00 cnvd-2026-14392 https://cve.radiocsirt.org/vuln/euvd-2026-274959 EUVD-2026-274959 2026-10-04T02:44:46.275409+00:00 EUVD-2026-274959 https://cve.radiocsirt.org/vuln/fkie_cve-2026-28462 fkie_cve-2026-28462 2026-10-04T02:44:46.275421+00:00

OpenClaw versions prior to 2026.2.13 contain a vulnerability in the browser control API in which it accepts user-supplied output paths for trace and download files without consistently constraining writes to temporary directories. Attackers with API access can exploit path traversal in POST /trace/stop, POST /wait/download, and POST /download endpoints to write files outside intended temp roots.

 https://cve.radiocsirt.org/vuln/ghsa-gq9c-wg68-gwj2 GHSA-gq9c-wg68-gwj2 — OpenClaw has a path traversal in browser trace/download output paths may allow arbitrary file writes 2026-10-04T02:44:46.275442+00:00

Affected: npm: openclaw

## Summary

OpenClaw’s browser control API accepted user-supplied output paths for trace/download files without consistently constraining writes to OpenClaw-managed temporary directories.

## Impact

If an attacker can access the browser control API, they could attempt to write trace/download output files outside intended temp roots, depending on process filesystem permissions.

## Affected versions

`openclaw` `< 2026.2.13`

## Fixed versions

`openclaw` `>= 2026.2.13`

## Remediation

Upgrade to `2026.2.13` or later.

## What changed

The fix constrains output paths for:

- `POST /trace/stop` - `POST /wait/download` - `POST /download`

All three now enforce OpenClaw temp-root boundaries and reject traversal/escape paths.

## Credits

Thanks to Adnan Jakati (@jackhax) of Praetorian for responsible disclosure.

Fix shipped in PR #15652 and merged to `main` on February 13, 2026 (`7f0489e4731c8d965d78d6eac4a60312e46a9426`).

---

Fix commit 7f0489e4731c8d965d78d6eac4a60312e46a9426 confirmed on main and in v2026.2.14. Upgrade to `openclaw >= 2026.2.13`.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0424 WID-SEC-W-2026-0424 — OpenClaw: Mehrere Schwachstellen 2026-10-04T02:44:46.275483+00:00

Ein Angreifer kann diese Schwachstellen in OpenClaw ausnutzen, um beliebigen Programmcode auszuführen, sich erhöhte Berechtigungen zu verschaffen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen oder andere, nicht näher bezeichnete Angriffe durchzuführen.