Openclaw cli: OpenClaw: Path traversal via inbound channel attachment path in ACP dispatch allows arbitrary file read (CVE-2026-41370)

The OpenClaw CLI package (npm) has a path traversal vulnerability (CVE-2026-41370) in its ACP dispatch feature. Specifically, inbound channel attachment paths are not properly validated, allowing an attacker with limited privileges to read arbitrary files on the system. The vulnerability affects versions from 2026.1.29 up to but not including 2026.3.31. The fix was introduced in version 2026.3.31, which enforces root directory checks to prevent traversal outside the allowed attachment-cache. The vulnerability has a medium severity rating and no known exploits in the wild have been reported.

An attacker with local privileges can exploit the path traversal flaw to read arbitrary files on the system, potentially exposing sensitive information. The vulnerability does not require user interaction and has low complexity to exploit, but it requires at least limited privileges on the system. There is no indication of remote exploitation or privilege escalation beyond the file read capability.

Users should upgrade OpenClaw CLI to version 2026.3.31 or later, where the path traversal vulnerability has been fixed by enforcing root directory checks on attachment paths. No other mitigation is required as the fix is officially released.