6.7

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-26972

CVE-2026-26972: OpenClaw has a Path Traversal in Browser Download Functionality

Summary

OpenClaw browser download helpers accepted an unsanitized output path. When invoked via the browser control gateway routes, this allowed path traversal to write downloads outside the intended OpenClaw temp downloads directory.

This issue is not exposed via the AI agent tool schema (no download action). Exploitation requires authenticated CLI access or an authenticated gateway RPC token.

Affected Packages / Versions

Package: openclaw (npm)
Affected: >=2026.1.12, <=2026.2.12
Fixed: >=2026.2.13

Details

Affected code: src/browser/pw-tools-core.downloads.ts (waitForDownloadViaPlaywright, downloadViaPlaywright).

Fixed entrypoints (as of 2026.2.13):

Gateway browser control routes /wait/download and /download now restrict path to DEFAULT_DOWNLOAD_DIR via resolvePathWithinRoot.

Fix Commit(s)

7f0489e4731c8d965d78d6eac4a60312e46a9426

Mitigation

Upgrade to openclaw >=2026.2.13.

Thanks @locus-x64 for reporting.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-26972

CVE-2026-26972:

6.7

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	>= 2026.1.12, <= 2026.2.12	2026.2.13

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability is a classic path traversal issue affecting file download and trace functionalities in OpenClaw. The root cause is the lack of input sanitization on file paths provided by the user through specific API endpoints.

The analysis of the patch commit 7f0489e4731c8d965d78d6eac4a60312e46a9426 reveals that the route handlers for /wait/download, /download (in src/browser/routes/agent.act.ts), and /trace/stop (in src/browser/routes/agent.debug.ts) were accepting a path parameter from the request body and using it directly for file operations. This allowed an authenticated user to use '..' sequences in the path to navigate outside the intended temporary directories and write files to arbitrary locations on the server's filesystem.

The patch introduces a new function, resolvePathWithinRoot, which is now used by all the affected route handlers to validate and sanitize the user-provided path, ensuring it resolves to a location within the designated root directory. The functions waitForDownloadViaPlaywright, downloadViaPlaywright, and traceStopViaPlaywright are the downstream functions that actually perform the file writing and would appear in a runtime profile during exploitation, even though the primary vulnerability logic was in the calling route handlers.

Vulnerable functions

registerBrowserAgentActRoutes

src/browser/routes/agent.act.ts

The route handler for '/wait/download' within this function accepted a 'path' from the user without validation. This path was then passed to 'waitForDownloadViaPlaywright', allowing a malicious user to specify a path like '../../../../tmp/pwned' to write a file outside the intended downloads directory.

registerBrowserAgentActRoutes

src/browser/routes/agent.act.ts

The route handler for '/download' within this function accepted a 'path' from the user without validation. This path was then passed to 'downloadViaPlaywright', allowing a path traversal attack to write a file outside the intended downloads directory.

registerBrowserAgentDebugRoutes

src/browser/routes/agent.debug.ts

The route handler for '/trace/stop' within this function took a user-provided path 'out' to construct the 'tracePath'. No validation was performed to prevent directory traversal, allowing a user to write the trace file to an arbitrary location.

waitForDownloadViaPlaywright

src/browser/pw-tools-core.downloads.ts

This function is called by the vulnerable '/wait/download' route handler. It receives the unsanitized file path and performs the file write operation, making it a key component in the execution of the path traversal vulnerability. It trusts its caller to provide a safe path.

downloadViaPlaywright

src/browser/pw-tools-core.downloads.ts

This function is called by the vulnerable '/download' route handler. It receives the unsanitized file path and performs the file write operation. It is directly involved in the path traversal vulnerability by writing to the malicious path provided by the user.

traceStopViaPlaywright

src/browser/pw-tools-core.traces.ts

This function is called by the vulnerable '/trace/stop' route handler. It receives a file path for saving a trace file and writes to it. Since the caller did not validate the path, this function could be exploited to write a file to an arbitrary location on the file system.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.

6.7

-

Basic Information

Basic Information

Concerned about an active attack path?

CVE-2026-26972: OpenClaw has a Path Traversal in Browser Download Functionality

Summary

Affected Packages / Versions

Details

Fix Commit(s)

Mitigation

CVE-2026-26972:

6.7

-

Basic Information

Basic Information

Is this CVE running in your environment?

Technical Details

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Vulnerability IntelligenceMiggo AI

Unlock WAF rules for this CVE

WAF Protection Rules

WAF Rule

Reasoning

Basic Information

Basic Information

6.7

6.7

CVE-2026-26972: OpenClaw has a Path Traversal in Browser Download Functionality

Summary

Affected Packages / Versions

Details

Fix Commit(s)

Mitigation

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI