A vulnerability in the openclaw npm package (versions before 2026.4.10) allows QQBot media tags in AI reply text to read arbitrary local files outside the intended media storage boundary. This local file disclosure issue was fixed in version 2026.4.10 and later.