GHSA-64qx-vpxx-mvqf

Suggest an improvement
Source
https://github.com/advisories/GHSA-64qx-vpxx-mvqf
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/02/GHSA-64qx-vpxx-mvqf/GHSA-64qx-vpxx-mvqf.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-64qx-vpxx-mvqf
Aliases
Published
2026-02-17T16:43:51Z
Modified
2026-03-06T01:17:40Z
Severity
  • 7.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H CVSS Calculator
  • 7.1 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N CVSS Calculator
Summary
OpenClaw has an arbitrary transcript path file write via gateway sessionFile
Details

Summary

In OpenClaw versions prior to 2026.2.12, the gateway accepted an untrusted sessionFile path when resolving the session transcript file. This could allow an authenticated gateway client to create and append OpenClaw session transcript records at an arbitrary path on the gateway host.

Affected Versions

  • Affected: openclaw < 2026.2.12
  • Patched: openclaw >= 2026.2.12 (recommended: >= 2026.2.13)

Impact

An authenticated gateway client could influence where the gateway writes transcript data by supplying sessionFile outside of the sessions directory. Depending on deployment and filesystem permissions, this may enable arbitrary file creation and repeated appends, leading to configuration corruption and/or denial of service.

This issue does not, by itself, provide a proven remote code execution path.

Fix

The transcript path is now constrained to the sessions directory via resolveSessionFilePath(...) containment checks.

Fix commits:

  • 4199f9889f0c307b77096a229b9e085b8d856c26
  • (compat) 25950bcbb8ba4d8cde002557f6e27c219ae4deda

Credits

Thanks to @tubadeligoz for the report.

Database specific 
{
    "cwe_ids":  [
        "CWE-23",
        "CWE-284",
        "CWE-73",
        "CWE-78"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2026-02-17T16:43:51Z",
    "nvd_published_at":  "2026-03-05T22:16:18Z",
    "severity":  "HIGH"
}
References

Affected packages

npm / openclaw

Package

Name
openclaw
View open source insights on deps.dev
Purl
pkg:npm/openclaw

Affected ranges

Type
SEMVER
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2026.2.12

Database specific

source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/02/GHSA-64qx-vpxx-mvqf/GHSA-64qx-vpxx-mvqf.json"