https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T22:17:12.436665+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-06351 bdu:2026-06351 2026-10-03T22:17:12.442637+00:00 bdu:2026-06351 https://cve.radiocsirt.org/vuln/brew-openclaw-cli-cve-2026-28482 BREW-openclaw-cli-CVE-2026-28482 — OpenClaw's unsanitized session ID enables path traversal in transcript file operations 2026-10-03T22:17:12.442688+00:00

Affected: Homebrew: openclaw-cli

## Description

OpenClaw versions **<= 2026.2.9** construct transcript file paths using an unsanitized `sessionId` and also accept `sessionFile` paths without enforcing that they stay within the agent sessions directory.

A crafted `sessionId` and/or `sessionFile` (example: `../../etc/passwd`) can cause path traversal when the gateway performs transcript file read/write operations.

**Preconditions:** an attacker must be able to authenticate to the gateway (gateway token/password). By default the gateway binds to `loopback` (local-only); configurations that expose the gateway widen the attack surface.

## Affected Packages / Versions

- Package: `openclaw` (npm) - Affected: `<= 2026.2.9` - Fixed: `>= 2026.2.12`

## Fix

Fixed by validating session IDs (rejecting path separators / traversal sequences) and enforcing sessions-directory containment for session transcript file operations.

### Fix Commit(s)

- `4199f9889f0c307b77096a229b9e085b8d856c26`

### Additional Hardening

- `cab0abf52ac91e12ea7a0cf04fff315cf0c94d64`

## Mitigation

Upgrade to `openclaw >= 2026.2.12`.

Thanks @akhmittra for reporting.

 https://cve.radiocsirt.org/vuln/cnvd-2026-13551 cnvd-2026-13551 2026-10-03T22:17:12.442778+00:00 cnvd-2026-13551 https://cve.radiocsirt.org/vuln/euvd-2026-275110 EUVD-2026-275110 2026-10-03T22:17:12.442800+00:00 EUVD-2026-275110 https://cve.radiocsirt.org/vuln/fkie_cve-2026-28482 fkie_cve-2026-28482 2026-10-03T22:17:12.442822+00:00

OpenClaw versions prior to 2026.2.12 construct transcript file paths using unsanitized sessionId parameters and sessionFile paths without enforcing directory containment. Authenticated attackers can exploit path traversal sequences like ../../etc/passwd in sessionId or sessionFile parameters to read or write arbitrary files outside the agent sessions directory.

 https://cve.radiocsirt.org/vuln/ghsa-5xfq-5mr7-426q GHSA-5xfq-5mr7-426q — OpenClaw's unsanitized session ID enables path traversal in transcript file operations 2026-10-03T22:17:12.442865+00:00

Affected: npm: openclaw

## Description

OpenClaw versions **<= 2026.2.9** construct transcript file paths using an unsanitized `sessionId` and also accept `sessionFile` paths without enforcing that they stay within the agent sessions directory.

A crafted `sessionId` and/or `sessionFile` (example: `../../etc/passwd`) can cause path traversal when the gateway performs transcript file read/write operations.

**Preconditions:** an attacker must be able to authenticate to the gateway (gateway token/password). By default the gateway binds to `loopback` (local-only); configurations that expose the gateway widen the attack surface.

## Affected Packages / Versions

- Package: `openclaw` (npm) - Affected: `<= 2026.2.9` - Fixed: `>= 2026.2.12`

## Fix

Fixed by validating session IDs (rejecting path separators / traversal sequences) and enforcing sessions-directory containment for session transcript file operations.

### Fix Commit(s)

- `4199f9889f0c307b77096a229b9e085b8d856c26`

### Additional Hardening

- `cab0abf52ac91e12ea7a0cf04fff315cf0c94d64`

## Mitigation

Upgrade to `openclaw >= 2026.2.12`.

Thanks @akhmittra for reporting.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0424 WID-SEC-W-2026-0424 — OpenClaw: Mehrere Schwachstellen 2026-10-03T22:17:12.442936+00:00

Ein Angreifer kann diese Schwachstellen in OpenClaw ausnutzen, um beliebigen Programmcode auszuführen, sich erhöhte Berechtigungen zu verschaffen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen oder andere, nicht näher bezeichnete Angriffe durchzuführen.