CVE-2026-43570

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-43570
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-43570.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-43570
Aliases
Downstream
Published
2026-05-05T11:25:11.010Z
Modified
2026-07-08T08:26:12.338087638Z
Severity
  • 6.0 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N CVSS Calculator
Summary
OpenClaw 2026.3.22 < 2026.4.5 - Symlink Traversal in Remote Marketplace Repository Path Handling
Details

OpenClaw versions 2026.3.22 before 2026.4.5 contain a symlink traversal vulnerability in remote marketplace repository path handling that allows attackers to escape the expected repository root. Attackers can exploit this by providing crafted symlink paths to access files outside the intended repository directory.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/43xxx/CVE-2026-43570.json",
    "cna_assigner": "VulnCheck",
    "cwe_ids": [
        "CWE-61"
    ]
}
References

Affected packages

Git / github.com/openclaw/openclaw

Affected ranges

Type
GIT
Repo
https://github.com/openclaw/openclaw
Events
Introduced
e7d11f6c33e223a0dd8a21cfe01076bd76cef87a
Fixed
3e72c0352dde84a0bcb3aabafa99c2d4b12d1c46
Fixed
94b0062e90467e1582b47cc971f308457c537f3a
Fixed
b1dd3ded3589f6fa60ab85b3930a82d538edaeae
Database specific 
{
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ],
    "cpe": "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*",
    "extracted_events": [
        {
            "introduced": "2026.3.22"
        },
        {
            "fixed": "2026.4.5"
        }
    ]
}

Affected versions

v2026.*
v2026.3.22
v2026.3.23
v2026.3.23-2
v2026.3.23-beta.1
v2026.3.24
v2026.3.24-beta.1
v2026.3.24-beta.2
v2026.3.28
v2026.3.28-beta.1
v2026.3.31
v2026.3.31-beta.1
v2026.4.1
v2026.4.1-beta.1
v2026.4.2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-43570.json"