4.9

CVSS Score

4.0

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-43532

CVE-2026-43532: OpenClaw 2026.4.7 < 2026.4.10 - Sandbox Media Normalization Bypass via Discord Event Cover Image

OpenClaw versions 2026.4.7 before 2026.4.10 fail to normalize Discord event cover image parameters in sandbox media processing. Attackers can bypass media normalization to inject host-local media references into channel action paths expecting normalized media.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-43532

CVE-2026-43532:

4.9

CVSS Score

4.0

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	>= 2026.4.7, < 2026.4.10	2026.4.10

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability lies in the handling of Discord event cover images, where the 'image' parameter was not being properly sanitized, allowing for path traversal. The provided patch explicitly modifies the src/infra/outbound/message-action-params.ts file to include 'image' in the SANDBOX_MEDIA_PARAM_KEYS constant. This constant is used by the normalizeSandboxMediaParams function to identify which parameters to sanitize. Before the fix, normalizeSandboxMediaParams would ignore the 'image' parameter, leaving it unsanitized. Therefore, normalizeSandboxMediaParams is the key function related to the vulnerability. During an exploit, this function (in its vulnerable state) would be in the call stack, failing to prevent the path traversal.

Vulnerable functions

normalizeSandboxMediaParams

src/infra/outbound/message-action-params.ts

This function is responsible for normalizing media parameters to prevent path traversal vulnerabilities. Before the fix, the `image` parameter was not included in the list of parameters to be normalized (`SANDBOX_MEDIA_PARAM_KEYS`). This allowed an attacker to provide a malicious `file://` URL in the `image` parameter of a Discord event, which would not be sanitized, leading to a path traversal vulnerability. The fix was to add `image` to `SANDBOX_MEDIA_PARAM_KEYS`, ensuring that `normalizeSandboxMediaParams` processes and sanitizes this parameter.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.