Zetlyn
GitHubGet started

OpenClaw versions before 2026.8.1 fail to validate all source fields in structured message...

zetlyn/cve-ghsa vulnerability ghsa GHSA-xwq7-8jj4-2g7j cve CVE-2026-100536 known 2026-09-26

https://github.com/advisories/GHSA-xwq7-8jj4-2g7j

Properties

cvss6.5
receipt
Source
GitHub advisories
Its words
6.5
Read by
field:cvss.score
Said since
2026-09-28 11:44 UTC
Last answered
2026-10-06 13:46 UTC
Original
open at the source
What the source handed over
{
  "credits": [],
  "cve_id": "CVE-2026-100536",
  "cvss": {
    "score": 6.5,
    "vector_string": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
  },
  "cvss_severities": {
    "cvss_v3": {
      "score": 6.5,
      "vector_string": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
    },
    "cvss_v4": {
      "score": 7.1,
      "vector_string": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
    }
  },
  "cwes": [
    {
      "cwe_id": "CWE-22",
      "name": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')"
    }
  ],
  "description": "OpenClaw versions before 2026.8.1 fail to validate all source fields in structured message attachments, allowing attackers to hide unvalidated host paths behind allowed attachment sources. Attackers can exploit this by providing multiple source fields to bypass sandbox path validation and cause Telegram delivery to read and send known host files that would otherwise be rejected.",
  "epss": {
    "percentage": 0.00429,
    "percentile": 0.34609
  },
  "ghsa_id": "GHSA-xwq7-8jj4-2g7j",
  "github_reviewed_at": null,
  "html_url": "https://github.com/advisories/GHSA-xwq7-8jj4-2g7j",
  "identifiers": [
    {
      "type": "GHSA",
      "value": "GHSA-xwq7-8jj4-2g7j"
    },
    {
      "type": "CVE",
      "value": "CVE-2026-100536"
    }
  ],
  "nvd_published_at": "2026-09-26T03:16:59Z",
  "published_at": "2026-09-26T03:30:24Z",
  "references": [
    "https://github.com/openclaw/openclaw/security/advisories/GHSA-fphf-69cp-h5xw",
    "https://nvd.nist.gov/vuln/detail/CVE-2026-100536",
    "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-path-traversal-via-structured-attachments",
    "https://github.com/advisories/GHSA-xwq7-8jj4-2g7j"
  ],
  "repository_advisory_url": null,
  "severity": "high",
  "source_code_location": "",
  "summary": "OpenClaw versions before 2026.8.1 fail to validate all source fields in structured message...",
  "type": "unreviewed",
  "updated_at": "2026-09-26T03:30:28Z",
  "url": "https://api.github.com/advisories/GHSA-xwq7-8jj4-2g7j",
  "vulnerabilities": [],
  "withdrawn_at": null
}
cweCWE-22
receipt
Source
GitHub advisories
Its words
CWE-22
Read by
field:cwes[].cwe_id
Said since
2026-09-28 11:44 UTC
Last answered
2026-10-06 13:46 UTC
Original
open at the source
What the source handed over
{
  "credits": [],
  "cve_id": "CVE-2026-100536",
  "cvss": {
    "score": 6.5,
    "vector_string": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
  },
  "cvss_severities": {
    "cvss_v3": {
      "score": 6.5,
      "vector_string": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
    },
    "cvss_v4": {
      "score": 7.1,
      "vector_string": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
    }
  },
  "cwes": [
    {
      "cwe_id": "CWE-22",
      "name": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')"
    }
  ],
  "description": "OpenClaw versions before 2026.8.1 fail to validate all source fields in structured message attachments, allowing attackers to hide unvalidated host paths behind allowed attachment sources. Attackers can exploit this by providing multiple source fields to bypass sandbox path validation and cause Telegram delivery to read and send known host files that would otherwise be rejected.",
  "epss": {
    "percentage": 0.00429,
    "percentile": 0.34609
  },
  "ghsa_id": "GHSA-xwq7-8jj4-2g7j",
  "github_reviewed_at": null,
  "html_url": "https://github.com/advisories/GHSA-xwq7-8jj4-2g7j",
  "identifiers": [
    {
      "type": "GHSA",
      "value": "GHSA-xwq7-8jj4-2g7j"
    },
    {
      "type": "CVE",
      "value": "CVE-2026-100536"
    }
  ],
  "nvd_published_at": "2026-09-26T03:16:59Z",
  "published_at": "2026-09-26T03:30:24Z",
  "references": [
    "https://github.com/openclaw/openclaw/security/advisories/GHSA-fphf-69cp-h5xw",
    "https://nvd.nist.gov/vuln/detail/CVE-2026-100536",
    "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-path-traversal-via-structured-attachments",
    "https://github.com/advisories/GHSA-xwq7-8jj4-2g7j"
  ],
  "repository_advisory_url": null,
  "severity": "high",
  "source_code_location": "",
  "summary": "OpenClaw versions before 2026.8.1 fail to validate all source fields in structured message...",
  "type": "unreviewed",
  "updated_at": "2026-09-26T03:30:28Z",
  "url": "https://api.github.com/advisories/GHSA-xwq7-8jj4-2g7j",
  "vulnerabilities": [],
  "withdrawn_at": null
}
severityhigh
From 7.0 to 8.9.
receipt
Source
GitHub advisories
Its words
high
Read by
field:severity
Said since
2026-09-28 11:44 UTC
Last answered
2026-10-06 13:46 UTC
Original
open at the source
What the source handed over
{
  "credits": [],
  "cve_id": "CVE-2026-100536",
  "cvss": {
    "score": 6.5,
    "vector_string": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
  },
  "cvss_severities": {
    "cvss_v3": {
      "score": 6.5,
      "vector_string": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
    },
    "cvss_v4": {
      "score": 7.1,
      "vector_string": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
    }
  },
  "cwes": [
    {
      "cwe_id": "CWE-22",
      "name": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')"
    }
  ],
  "description": "OpenClaw versions before 2026.8.1 fail to validate all source fields in structured message attachments, allowing attackers to hide unvalidated host paths behind allowed attachment sources. Attackers can exploit this by providing multiple source fields to bypass sandbox path validation and cause Telegram delivery to read and send known host files that would otherwise be rejected.",
  "epss": {
    "percentage": 0.00429,
    "percentile": 0.34609
  },
  "ghsa_id": "GHSA-xwq7-8jj4-2g7j",
  "github_reviewed_at": null,
  "html_url": "https://github.com/advisories/GHSA-xwq7-8jj4-2g7j",
  "identifiers": [
    {
      "type": "GHSA",
      "value": "GHSA-xwq7-8jj4-2g7j"
    },
    {
      "type": "CVE",
      "value": "CVE-2026-100536"
    }
  ],
  "nvd_published_at": "2026-09-26T03:16:59Z",
  "published_at": "2026-09-26T03:30:24Z",
  "references": [
    "https://github.com/openclaw/openclaw/security/advisories/GHSA-fphf-69cp-h5xw",
    "https://nvd.nist.gov/vuln/detail/CVE-2026-100536",
    "https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-path-traversal-via-structured-attachments",
    "https://github.com/advisories/GHSA-xwq7-8jj4-2g7j"
  ],
  "repository_advisory_url": null,
  "severity": "high",
  "source_code_location": "",
  "summary": "OpenClaw versions before 2026.8.1 fail to validate all source fields in structured message...",
  "type": "unreviewed",
  "updated_at": "2026-09-26T03:30:28Z",
  "url": "https://api.github.com/advisories/GHSA-xwq7-8jj4-2g7j",
  "vulnerabilities": [],
  "withdrawn_at": null
}

Text

OpenClaw versions before 2026.8.1 fail to validate all source fields in structured message... OpenClaw versions before 2026.8.1 fail to validate all source fields in structured message attachments, allowing attackers to hide unvalidated host paths behind allowed attachment sources. Attackers can exploit this by providing multiple source fields to bypass sandbox path validation and cause Telegram delivery to read and send known host files that would otherwise be rejected.