Openclaw cli: Temporary path handling could write outside OpenClaw temp boundary (CVE-2026-32026)

The OpenClaw CLI package (npm) versions <= 2026.2.23 improperly validate sandbox media local paths by accepting absolute paths under the host's temporary directory (os.tmpdir()) without enforcing that these paths remain within the active sandboxRoot. Because outbound attachment hydration consumes these paths as trusted, this flaw allows reading and exfiltration of files outside the sandbox boundary via attacker-controlled media references. The vulnerability is addressed by restricting sandbox tmp-path acceptance to OpenClaw-managed temp roots and was fixed in version 2026.2.24.

The confidentiality impact is high for deployments relying on sandboxRoot as a strict local filesystem boundary, as attackers can read and attach host temporary files outside the sandbox workspace. There is no impact on integrity or availability reported. The CVSS 3.1 score is 6.5 (medium severity), reflecting network attack vector with low complexity and no user interaction required but requiring low privileges.

A fix is available in OpenClaw CLI version 2026.2.24 and later. Users should upgrade to version >= 2026.2.24 to remediate this vulnerability. The fix restricts sandbox tmp-path acceptance to OpenClaw-managed temp roots and adds CI guardrails to prevent regressions. No additional mitigation is required once patched.