CVE-2026-100547
Received Received - Intake

Path Traversal in OpenClaw npm Package

Publication date: 2026-09-26

Last updated on: 2026-09-26

Assigner: VulnCheck

Description
OpenClaw is a coding agent distributed as the npm package `openclaw`. In affected versions (2026.7.1 through 2026.7.2), alternate but valid `file:` URL spellings supplied over the Agent Client Protocol (ACP) were treated as relative paths and were incorrectly classified as reads scoped to the session working directory. When an operator connected `openclaw acp client` to an untrusted or compromised ACP peer, that peer could request a read of a file outside the session working directory without the approval prompt normally required for that path, resulting in disclosure of local file contents. The demonstrated impact is limited to file confidentiality; mutating and command-capable tool classes are not affected. This issue is fixed in OpenClaw 2026.8.1.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-26
Last Modified
2026-09-26
Generated
2026-09-26
AI Q&A
2026-09-26
EPSS Evaluated
N/A
NVD
CVE-2026-100547
EUVD
EUVD-2026-87503

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
openclaw openclaw From 2026.7.1 (inc) to 2026.7.2 (inc)
openclaw openclaw 2026.8.1

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-180 The product validates input before it is canonicalized, which prevents the product from detecting data that becomes invalid after the canonicalization step.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

OpenClaw is a coding agent distributed as an npm package. In versions 2026.7.1 through 2026.7.2, certain valid file: URL spellings were incorrectly treated as relative paths. This allowed reads of files outside the session working directory without triggering required approval prompts when connecting to untrusted or compromised ACP peers. The issue was fixed in version 2026.8.1.

Detection Guidance

Detecting this vulnerability requires checking the installed version of OpenClaw. Run 'npm list openclaw' to verify if your version is between 2026.7.1 and 2026.7.2. If so, the system is vulnerable. Additionally, monitor network connections to untrusted peers via ACP to detect suspicious file read requests.

Impact Analysis

If you use OpenClaw versions 2026.7.1 to 2026.7.2 and connect to an untrusted or compromised ACP peer, an attacker could request reads of files outside your session directory without your approval. This could lead to unauthorized disclosure of local file contents, affecting confidentiality. The impact is limited to file reads; other functions like file modifications or commands are unaffected.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive files, potentially violating data confidentiality requirements under GDPR and HIPAA. Unauthorized file disclosure may result in non-compliance with these regulations, depending on the nature of the exposed data. Users should upgrade to OpenClaw 2026.8.1 or later to mitigate this risk.

Mitigation Strategies

Upgrade OpenClaw to version 2026.8.1 or later immediately using 'npm install openclaw@2026.8.1'. Avoid connecting to untrusted or compromised ACP peers until the upgrade is complete. Ensure no sensitive files are exposed during this period.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-100547. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart