Openclaw cli: OpenClaw: QMD memory_get restricts reads to canonical or indexed memory paths (CVE-2026-44111)
Description
A vulnerability in OpenClaw CLI's QMD backend allowed reading arbitrary Markdown files within the workspace root, bypassing intended memory-path restrictions. This issue affected versions prior to 2026.4.15 and was fixed in that release by restricting reads to canonical or indexed QMD workspace paths only. Exploitation requires access to the memory tool interface and is limited to workspace Markdown files, resulting in a low severity impact.
CVSS v4.0
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The QMD backend's memory_get read path in OpenClaw CLI accepted arbitrary workspace Markdown file paths that were inside the workspace root but outside canonical memory locations or indexed QMD result sets. This allowed a caller with access to memory_get to read arbitrary *.md files under the workspace root, bypassing the intended memory-path policy. The vulnerability was fixed in version 2026.4.15 by enforcing that QMD reads are restricted to canonical memory paths or previously indexed QMD workspace paths. The fix was verified by code changes rejecting non-default workspace Markdown paths unless they match indexed QMD paths.
Potential Impact
An attacker with access to the memory_get interface could read arbitrary Markdown files within the workspace root, including files not intended to be accessible via the QMD backend. The impact is limited to information disclosure of workspace Markdown files and requires existing access to the memory tool surface. The severity is low due to these constraints.
Mitigation Recommendations
A patch is available in OpenClaw CLI version 2026.4.15 that restricts QMD reads to canonical or indexed workspace Markdown paths. Users should upgrade to version 2026.4.15 or later to remediate this vulnerability.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- BREW-openclaw-cli-CVE-2026-44111
- Osv Schema Version
- 1.7.3
- Ecosystems
- ["Homebrew"]
- Cvss Version
- 4.0
Threat ID: 6ac2459212601ec6a3164966
Added to database: 10/04/2026, 12:24:50 UTC
Last enriched: 10/04/2026, 12:40:23 UTC
Last updated: 10/04/2026, 16:08:38 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.