OpenClaw versions before 2026.9.5 have an authorization vulnerability in the Gateway's local media root allowlist that breaks filesystem isolation between sandboxed sessions. This flaw allows sandboxed or untrusted content to read files from other session sandboxes or shared workspace directories via media pipeline functions that do not properly restrict read access. The vulnerability has a CVSS score of 6.3, indicating medium severity.