OpenClaw versions before 2026.8.1 fail to validate all source fields in structured message...

zetlyn/cve-ghsa vulnerability ghsa GHSA-xwq7-8jj4-2g7j cve CVE-2026-100536 known 2026-09-26

https://github.com/advisories/GHSA-xwq7-8jj4-2g7j

Properties

cvss	6.5 receipt Source GitHub advisories Said since 2026-09-26 15:00 UTC Last answered 2026-10-06 13:46 UTC Original open at the source This source has not kept a receipt for this claim yet. The next update that reads it will.
cwe	CWE-22 receipt Source GitHub advisories Said since 2026-09-26 15:00 UTC Last answered 2026-10-06 13:46 UTC Original open at the source This source has not kept a receipt for this claim yet. The next update that reads it will.
severity	high From 7.0 to 8.9. receipt Source GitHub advisories Said since 2026-09-26 15:00 UTC Last answered 2026-10-06 13:46 UTC Original open at the source This source has not kept a receipt for this claim yet. The next update that reads it will.

Text

OpenClaw versions before 2026.8.1 fail to validate all source fields in structured message... OpenClaw versions before 2026.8.1 fail to validate all source fields in structured message attachments, allowing attackers to hide unvalidated host paths behind allowed attachment sources. Attackers can exploit this by providing multiple source fields to bypass sandbox path validation and cause Telegram delivery to read and send known host files that would otherwise be rejected.