8.7

CVSS Score

4.0

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-32846

CVE-2026-32846: OpenClaw < 2026.3.28 Media Parsing Path Traversal to Arbitrary File Read

OpenClaw before 2026.3.28 contains a path traversal vulnerability in media parsing that allows attackers to read arbitrary files by bypassing path validation in the isLikelyLocalPath() and isValidMedia() functions. Attackers can exploit incomplete validation and the allowBareFilename bypass to reference files outside the intended application sandbox, resulting in disclosure of sensitive information including system files, environment files, and SSH keys.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-32846

CVE-2026-32846:

8.7

CVSS Score

4.0

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

SSVC / BOD 26-04 ↗

Exploitation pocAutomatable YesTech Impact Partial

Select your environment

→SSVCDeferfix on upgrade

Runtime reachability resolves your actual outcome.Book a demo

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	<= 2026.3.23	2026.03.28

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability lies in the src/media/parse.ts file, where path validation was insufficient. The description correctly points out that the isLikelyLocalPath and isValidMedia functions were the source of the vulnerability.

isLikelyLocalPath: The original implementation of this function was too permissive. It recognized patterns like ~/ which could be used to access files in the user's home directory. It also lacked any checks for ../ traversal sequences. The patch completely replaces this function with a new version that calls hasTraversalOrHomeDirPrefix to block these dangerous patterns. The old, vulnerable function was renamed to looksLikeLocalFilePath and is now only used for non-security-critical operations.
isValidMedia: This function had a bypass vulnerability when the allowBareFilename option was used. A path like ../../.env could be considered a valid "bare filename" because it has a file extension (.env), allowing it to pass validation. The patch adds a call to the new hasTraversalOrHomeDirPrefix function at the very beginning of isValidMedia, ensuring that any input with traversal patterns is immediately rejected, closing the bypass.

An attacker could exploit this by crafting a MEDIA: directive with a malicious path. For example, MEDIA:../../../../etc/passwd. The parsing logic would identify this as a potential media file. The vulnerable isLikelyLocalPath and isValidMedia functions would fail to block the traversal, and the application would then attempt to load the file from the manipulated path, disclosing its contents. The runtime profile during such an attack would show calls to isLikelyLocalPath and isValidMedia processing the malicious path.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.