GHSA-cfvj-7rx7-fc7c

Suggest an improvement
Source
https://github.com/advisories/GHSA-cfvj-7rx7-fc7c
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/03/GHSA-cfvj-7rx7-fc7c/GHSA-cfvj-7rx7-fc7c.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-cfvj-7rx7-fc7c
Aliases
Downstream
Published
2026-03-03T21:18:28Z
Modified
2026-03-19T21:31:26.273054Z
Severity
  • 7.7 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N CVSS Calculator
Summary
OpenClaw: stageSandboxMedia destination symlink traversal can overwrite files outside sandbox workspace
Details

Summary

stageSandboxMedia allowed destination symlink traversal during media staging, which could overwrite files outside the sandbox workspace root.

Impact

When sandbox media staging handled inbound files, destination writes under media/inbound were not destination-alias-safe. If a symlink existed in that destination path, the write could follow it and overwrite host files outside the intended sandbox workspace boundary.

Affected Packages / Versions

  • Package: openclaw (npm)
  • Latest published version checked: 2026.3.1
  • Affected: <= 2026.3.1
  • Patched versions: >= 2026.3.2 (released)

Root Cause

stageSandboxMedia validated source paths but wrote destination files with a direct copy path that did not enforce destination boundary/alias checks.

Remediation

The fix routes staging writes through root-scoped safe write primitives for both local and SCP-staged attachments, preventing destination symlink traversal escapes.

Fix Commit(s)

  • 17ede52a4be3034f6ec4b883ac6b81ad0101558a
Database specific 
{
    "github_reviewed": true,
    "github_reviewed_at": "2026-03-03T21:18:28Z",
    "cwe_ids": [
        "CWE-59"
    ],
    "severity": "HIGH",
    "nvd_published_at": null
}
References

Affected packages

npm / openclaw

Package

Name
openclaw
View open source insights on deps.dev
Purl
pkg:npm/openclaw

Affected ranges

Type
SEMVER
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2026.3.2

Database specific

source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/03/GHSA-cfvj-7rx7-fc7c/GHSA-cfvj-7rx7-fc7c.json"
last_known_affected_version_range 
"<= 2026.3.1"