Openclaw cli: OpenClaw: Webchat media embedding enforces local-root containment for tool-result files (CVE-2026-41389)

The OpenClaw CLI webchat tool-result media normalization process previously allowed local and UNC-style file paths to be passed into the host-side media embedding path without enforcing the configured local-root containment policy. This could cause the host to attempt local file reads or Windows network path access when preparing webchat media blocks. The vulnerability affects versions >=2026.4.7 and <2026.4.15. The fix in version 2026.4.15 hardens the media path handling by rejecting remote-host file URLs and Windows network paths before filesystem access and enforcing local-root containment checks prior to file stat or read operations.

Exploitation of this vulnerability could disclose allowed host files or trigger network credential exposure on affected Windows deployments. The severity is medium because exploitation requires a crafted tool-result media path to reach the webchat embedding path, and the file read occurs before the user sees the rendered result. There is no indication of integrity or availability impact.

A patch is available in OpenClaw CLI version 2026.4.15 that addresses this vulnerability. Users should upgrade to version 2026.4.15 or later. The fix rejects remote-host file URLs and Windows network paths before filesystem access and enforces local-root containment on audio embedding. No additional mitigation is required if this version is deployed.