Openclaw cli: OpenClaw: Shared reply MEDIA - paths are treated as trusted and can trigger cross-channel local file exfiltration (CVE-2026-42424)
Description
OpenClaw CLI versions up to 2026.4.4 have a vulnerability where shared reply MEDIA paths are treated as trusted, allowing cross-channel local file exfiltration. This means a crafted shared reply MEDIA reference could cause another channel to read local files as if they were trusted media. The issue is fixed in version 2026.4.8.
CVSS v3.1
Score 5.0medium
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The OpenClaw CLI (npm package) has a vulnerability identified as CVE-2026-42424 where shared reply MEDIA paths are improperly trusted, enabling cross-channel local file exfiltration. Specifically, a crafted shared reply MEDIA reference can cause a different channel to read local file paths as trusted generated media, violating the trust model within the local assistant environment. This vulnerability affects versions from 2026.1.29 up to but not including 2026.4.8. The issue was fixed in version 2026.4.8 with a verified patch committed to the main branch.
Potential Impact
An attacker able to craft a shared reply MEDIA reference can cause local files to be read across channels, potentially exposing sensitive local data. The vulnerability impacts confidentiality but does not affect integrity or availability. The attack requires local privileges (AV:L) and user interaction (UI:R), with low attack complexity (AC:L) and low privileges (PR:L).
Mitigation Recommendations
Upgrade OpenClaw CLI to version 2026.4.8 or later, where the vulnerability has been fixed. The fix is verified and available in the patched npm package. No additional mitigation is required beyond applying the official patch.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- BREW-openclaw-cli-CVE-2026-42424
- Osv Schema Version
- 1.7.3
- Ecosystems
- ["Homebrew"]
- Cvss Version
- 3.1
Threat ID: 6ac2459812601ec6a3165d3e
Added to database: 10/04/2026, 12:24:56 UTC
Last enriched: 10/04/2026, 12:43:56 UTC
Last updated: 10/04/2026, 16:08:38 UTC
Views: 1
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.