p PatchFirst

CVE-2026-25475

CVE-2026-25475 · OpenClaw Vulnerable to Local File Inclusion via MEDIA: Path Extraction

This page contains facts from public vulnerability sources. Check the original advisory before updating.

OpenClaw is a personal AI assistant. Prior to version 2026.1.30, the isValidMedia() function in src/media/parse.ts allows arbitrary file paths including absolute paths, home directory paths, and directory traversal sequences. An agent can read any file on the system by outputting MEDIA:/path/to/file, exfiltrating sensitive data to the user/channel. This issue has been patched in version 2026.1.30.

CVSS 6.5 · Medium · EPSS 0.8% · Fix available

Published
Updated

Stack: node

Affected products and versions

  • openclaw

    Versions
    • < 2026.1.30: Affected

    No fix published

  • openclaw npm

    Affected ranges
    • SEMVER: < 2026.1.30

    Update to 2026.1.30

Original sources

Check your server →