Openclaw cli: OpenClaw: memory-wiki ingest could read local files with operator.write scope (CVE-2026-53825)

The memory-wiki ingest feature in OpenClaw CLI versions >=2026.1.29 and <2026.5.12 contains a vulnerability (CVE-2026-53825) where a Gateway caller with operator.write scope can read arbitrary local files instead of being confined to designated ingest sources. This flaw exists within the context of the trusted-operator model, meaning only authenticated operators with write access to the plugin tool can exploit it. The vulnerability allows importing local file content into the wiki memory, potentially exposing sensitive local files. The impact depends on operator configuration and input trust boundaries. A patch is available for affected versions.

An authenticated Gateway operator with operator.write access to the plugin tool can read arbitrary local files, bypassing intended ingest source restrictions. This could lead to unauthorized disclosure of local file contents. The severity is medium with a CVSS score of 6.5, reflecting high confidentiality impact but no integrity or availability impact. The actual risk depends on the operator's configuration and whether untrusted input can trigger the vulnerability.

A patch is available for affected versions; update to the fixed OpenClaw release when it is published. Until patched, limit memory-wiki write access to trusted operators only. Additionally, narrow channel and tool allowlists, avoid sharing a Gateway instance between mutually untrusted users, and disable the memory-wiki ingest feature if it is not needed.