OpenClaw versions from 2026.3.22 up to but not including 2026.4.5 have a symlink traversal vulnerability in the handling of remote marketplace repository paths. This flaw allows attackers to provide crafted symbolic link paths to escape the intended repository root directory and access files outside the expected scope. The vulnerability is fixed in version 2026.4.5.