Openclaw cli: OpenClaw safeBins file-existence oracle information disclosure (CVE-2026-4040)
Description
CVE-2026-4040 is an information disclosure vulnerability in the OpenClaw CLI's safeBins file-existence oracle. The vulnerability allowed attackers to infer the presence of files on the host filesystem by observing differences in command allow/deny behavior based on file existence. This could enable filesystem enumeration and aid in planning further attacks. The issue affects openclaw versions up to and including 2026.2.17. A patch is available in version 2026.2.18 that changes the safe-bin validation to avoid file-existence checks and blocks file-oriented flags in safe-bin mode.
CVSS v3.1
Score 4.3medium
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The OpenClaw CLI safeBins approval flow had a file-existence oracle vulnerability where command allow/deny decisions varied depending on whether a file path existed on the host filesystem. This allowed an attacker with access to this execution surface to probe for the existence of specific files, such as secrets or configuration files. The vulnerability affects openclaw npm package versions up to 2026.2.17. The fix removes file-existence checks from safe-bin validation, enforces deterministic argv-only validation, blocks file-oriented flags (e.g., 'sort -o', 'jq -f', 'grep -f'), and maintains trusted-path checks. The fix is included in version 2026.2.18.
Potential Impact
Attackers with access to the vulnerable safe-bin execution surface could determine whether specific files exist on the host filesystem. This information disclosure can facilitate filesystem enumeration and improve the effectiveness of subsequent attacks by revealing sensitive file presence. The vulnerability does not allow modification or denial of service but leaks confidential information about the filesystem state.
Mitigation Recommendations
A patch is available in openclaw version 2026.2.18 that eliminates the file-existence oracle by changing the safe-bin validation to deterministic argv-only checks and blocking file-oriented flags in safe-bin mode. Users should upgrade to version 2026.2.18 or later to remediate this vulnerability.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- BREW-openclaw-cli-CVE-2026-4040
- Osv Schema Version
- 1.7.3
- Ecosystems
- ["Homebrew"]
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6ac245a812601ec6a31661b3
Added to database: 10/04/2026, 12:25:12 UTC
Last enriched: 10/04/2026, 12:52:10 UTC
Last updated: 10/04/2026, 16:08:39 UTC
Views: 1
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.