GHSA-fqcm-97m6-w7rm

Source

https://github.com/advisories/GHSA-fqcm-97m6-w7rm

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/03/GHSA-fqcm-97m6-w7rm/GHSA-fqcm-97m6-w7rm.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-fqcm-97m6-w7rm

Aliases

CVE-2026-27522

Downstream

MINI-945v-h5hc-gf47

Published

2026-03-02T23:34:02Z

Modified

2026-03-18T22:02:27.123465Z

Severity

8.7 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N CVSS Calculator

Summary

OpenClaw: Message action attachment hydration bypasses local media root checks when sandboxRoot is unset

Details

Impact

sendAttachment and setGroupIcon message actions could hydrate media from local absolute paths when sandboxRoot was unset, bypassing intended local media root checks. This could allow reads of arbitrary host files reachable by the runtime user when an authorized message-action path was triggered.

Affected Packages / Versions

Package: openclaw (npm)
Latest published npm version at triage: 2026.2.23
Vulnerable: <= 2026.2.23
Patched in code: >= 2026.2.24 (planned next release)

Remediation

Upgrade to openclaw 2026.2.24 or later once published.

Fix Commit(s)

270ab03e379f9653e15f7033c9830399b66b7e51

Release Process Note

patched_versions is pre-set to the planned next release (>= 2026.2.24). Once that npm release is published, this advisory can be published without further field edits.

OpenClaw thanks @GCXWLP for reporting.

Publication Update (2026-02-25)

openclaw@2026.2.24 is published on npm and contains the fix commit(s) listed above. This advisory now marks >= 2026.2.24 as patched.

Database specific

{
    "github_reviewed": true,
    "github_reviewed_at": "2026-03-02T23:34:02Z",
    "cwe_ids": [
        "CWE-200",
        "CWE-22"
    ],
    "severity": "HIGH",
    "nvd_published_at": "2026-03-18T02:16:23Z"
}

References

Affected packages

npm / openclaw

Package

Name: openclaw; View open source insights on deps.dev
Purl: pkg:npm/openclaw

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2026.2.24

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/03/GHSA-fqcm-97m6-w7rm/GHSA-fqcm-97m6-w7rm.json"

last_known_affected_version_range

"<= 2026.2.23"