Openclaw cli: OpenClaw vulnerable to arbitrary file read via $include directive (CVE-2026-32061)

The OpenClaw CLI suffers from a path traversal vulnerability in the resolution of the config $include directive (CVE-2026-32061). An attacker with the capability to modify OpenClaw's configuration can exploit this by specifying absolute paths or traversal sequences to read arbitrary local files accessible to the OpenClaw process user. The attack vectors include setting $include to absolute paths (e.g., /etc/passwd), using directory traversal to escape the config directory, or creating symlinks inside the config directory to external files if real-path checks are not enforced. The impact is limited by the file permissions of the OpenClaw runtime user. The vulnerability affects openclaw npm package versions up to 2026.2.15 and is fixed starting from 2026.2.17.

Successful exploitation allows disclosure of local files readable by the OpenClaw process user, potentially exposing sensitive information such as API keys and private configuration data. The vulnerability does not allow remote unauthenticated exploitation by itself and requires prior ability to modify configuration or create symlinks within the config directory.

A patch is available in OpenClaw version 2026.2.17. Users should upgrade to this version or later to remediate the vulnerability. Until the patch is applied, restrict access to the OpenClaw configuration files and prevent unauthorized modification or symlink creation within the config directory to mitigate exploitation risk.