Openclaw cli: OpenClaw's Control UI Static File Handler Follows Symlinks and Allows Out-of-Root File Read (CVE-2026-32020)
Description
OpenClaw CLI's Control UI static file handler improperly followed symbolic links, allowing an attacker to read files outside the intended root directory. This vulnerability is a path traversal issue caused by insufficient validation of symlinked asset paths. The flaw affects versions up to and including 2026.2.21-2 and is fixed in version 2026.2.22. The impact is primarily confidentiality loss due to out-of-root file reads. The severity is rated low in trusted environments but could be higher in shared or less controlled setups. A patch is available and enforces realpath containment to prevent directory traversal via symlinks.
CVSS v3.1
Score 3.3low
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The OpenClaw CLI Control UI static file handler previously validated asset paths lexically but then served files using APIs that follow symbolic links, allowing directory traversal outside the Control UI root. This vulnerability (CVE-2026-32020) enables out-of-root file reads by placing symlinks under the Control UI root. The issue was in src/gateway/control-ui.ts, where path joins and string-prefix checks were insufficient to prevent symlink traversal. The fix enforces realpath containment and verifies file identity before serving assets. Affected versions are <=2026.2.21-2, with the fix released in 2026.2.22.
Potential Impact
The vulnerability allows unauthorized reading of files outside the intended Control UI root directory, leading to potential confidentiality breaches. The severity is low in trusted operator deployments but may be higher in environments where shared writable directories exist. There is no impact on integrity or availability reported. No known exploits in the wild have been observed.
Mitigation Recommendations
A patch is available in OpenClaw CLI version 2026.2.22 that enforces realpath containment and verifies file identity before serving Control UI assets. Users should upgrade to version 2026.2.22 or later to remediate this vulnerability. No additional mitigation actions are required if the patch is applied.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- BREW-openclaw-cli-CVE-2026-32020
- Osv Schema Version
- 1.7.3
- Ecosystems
- ["Homebrew"]
- Cvss Version
- 3.1
Threat ID: 6ac245bd12601ec6a3166bf3
Added to database: 10/04/2026, 12:25:33 UTC
Last enriched: 10/04/2026, 13:05:07 UTC
Last updated: 10/04/2026, 16:08:37 UTC
Views: 1
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.