Openclaw cli: OpenClaw has a path traversal in apply_patch could write/delete files outside the workspace (CVE-2026-32060)

OpenClaw CLI versions >=2026.1.29 and <2026.2.14 have a path traversal vulnerability (CVE-2026-32060) in the apply_patch functionality. When apply_patch is enabled and the agent runs without filesystem sandbox containment (tools.exec.applyPatch.workspaceOnly set to false), crafted paths such as '../../...' or absolute paths can escape the workspace directory and cause file writes or deletions outside the intended workspace. This vulnerability is fixed in version 2026.2.14. The issue arises from non-sandboxed path resolution that does not enforce workspace containment. The vulnerability is relevant when less-trusted users can trigger tool execution or when operators expect workspace-only containment.

This vulnerability allows an attacker with permission to trigger the apply_patch tool to write or delete files outside the configured workspace directory, potentially leading to arbitrary file modification or deletion on the host system. The severity is high (CVSS 8.8) with impacts on confidentiality, integrity, and availability. The practical impact depends on deployment and access controls around tool invocation.

A fix is available in OpenClaw CLI version 2026.2.14 and later. Users should upgrade to this version to remediate the vulnerability. If upgrading is not immediately possible, mitigations include disabling the apply_patch feature (tools.exec.applyPatch.enabled = false), ensuring workspace containment is enabled (tools.exec.applyPatch.workspaceOnly = true), and restricting which users can trigger tool execution and which tools are allowlisted. These mitigations prevent path traversal outside the workspace.