Openclaw cli: OpenClaw's unsanitized session ID enables path traversal in transcript file operations (CVE-2026-28482)

OpenClaw CLI versions <= 2026.2.9 construct transcript file paths using unsanitized sessionId values and accept sessionFile paths without restricting them to the agent sessions directory. This allows an authenticated attacker to perform path traversal by supplying crafted sessionId or sessionFile values (e.g., '../../etc/passwd'), enabling unauthorized file read/write operations. The gateway binds to loopback by default, limiting exposure, but configurations exposing the gateway increase risk. The issue is fixed in version >= 2026.2.12 by validating session IDs to reject path separators and traversal sequences and enforcing containment within the sessions directory.

An attacker with authentication to the gateway can exploit this vulnerability to access or modify files outside the intended directory, potentially leading to unauthorized disclosure of sensitive information. The vulnerability does not affect confidentiality, integrity, or availability beyond file read/write in the context of the transcript files. The default local-only binding of the gateway limits exposure unless configured otherwise.

Upgrade to openclaw version 2026.2.12 or later, which includes validation of session IDs and enforces session transcript file operations to remain within the sessions directory. This update effectively mitigates the path traversal vulnerability.