CVE-2026-19008
Received Received - Intake

Path Traversal in mf-yang OpenClaw

Publication date: 2026-08-06

Last updated on: 2026-08-06

Assigner: VulDB

Description
A vulnerability was identified in mf-yang openclaw-cn up to 0.2.1. This issue affects the function assertNoSymlinkEscape of the file src/agents/sandbox-paths.ts of the component apply_patch Tool. Such manipulation leads to link following. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-06
Last Modified
2026-08-06
Generated
2026-08-06
AI Q&A
2026-08-06
EPSS Evaluated
N/A
NVD
CVE-2026-19008
EUVD
EUVD-2026-53766

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
mf-yang openclaw-cn to 0.2.1 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-59 The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-19008 is a security flaw in the openclaw-cn package (versions up to 0.2.1) affecting the apply_patch tool. It allows bypassing workspace file write restrictions due to improper handling of dangling symlinks. When a target path is a broken symlink inside the workspace, the tool incorrectly follows it outside the workspace, enabling file creation or overwriting outside intended boundaries.

Detection Guidance

Check if openclaw-cn version 0.2.1 or earlier is installed using package managers like npm or pnpm. Inspect workspace directories for dangling symlinks pointing outside the workspace. Review logs for unexpected file writes or errors related to apply_patch tool operations.

Impact Analysis

This vulnerability allows an attacker with access to an embedded agent session to corrupt files outside the workspace. Potential impacts include overwriting host-side configurations, scripts, or other project files, leading to data loss or system compromise. The attack requires specific conditions like enabled apply_patch tool and workspace write access.

Mitigation Strategies

Upgrade openclaw-cn to a version beyond 0.2.1 if available. Disable the apply_patch tool by setting tools.exec.applyPatch.enabled to false in configuration. Restrict workspace write access and monitor for suspicious symlink creation.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-19008. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart