N/A

CVSS Score

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-659f-22xc-98f2

GHSA-659f-22xc-98f2: OpenClaw hook transform path containment missed symlink-resolved escapes

Vulnerability

Webhook transform modules were validated with lexical path checks only. A symlink under the allowed hooks transform tree could resolve outside the intended directory and be dynamically imported.

Affected Packages / Versions

Package: openclaw (npm)
Affected versions: <= 2026.2.21-2
Patched version (planned next release): 2026.2.22

Impact

When an attacker can cause a transform module path to reference a symlinked entry that resolves outside the trusted transform directory, the gateway may import and execute unintended JavaScript with gateway-process privileges.

Attack Preconditions

Hook transforms are enabled and reachable.
Attacker can influence transform path resolution (for example via privileged config access and/or writable filesystem path in the transform tree).
A symlink escape exists to attacker-controlled code.

Remediation

Enforce realpath-aware containment for existing path ancestors before dynamic import.
Keep lexical containment checks for traversal and absolute-path escapes.
Add regression coverage for:
- transform module symlink escape rejection,
- hooks.transformsDir symlink escape rejection,
- in-root symlink allow-case.

Fix Commit(s)

f4dd0577b055f77af783105bd65eae32f3d5e6a1

OpenClaw thanks @aether-ai-agent for reporting.

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-659f-22xc-98f2

GHSA-659f-22xc-98f2:

N/A

CVSS Score

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	<= 2026.2.21-2	2026.2.22

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability is a path traversal weakness in OpenClaw's webhook transform module loading mechanism. The root cause lies in the resolveContainedPath function within src/gateway/hooks-mapping.ts, which failed to properly sanitize user-provided paths. Specifically, the function only performed lexical checks and did not resolve symbolic links before validation.

The exported function resolveHookMappings uses resolveContainedPath to validate paths specified in the hook configuration, such as the transformsDir and individual transform module paths. An attacker with privileges to create symlinks on the server's filesystem and influence the OpenClaw configuration could create a symlink within the expected transform directory that points to a malicious script located elsewhere on the system.

When resolveHookMappings processes this malicious configuration, the call to the vulnerable resolveContainedPath function would succeed because the initial, unresolved path appears to be legitimate. Subsequently, when the application attempts to load the transform module, it follows the symlink and executes the attacker's code with the full permissions of the OpenClaw gateway process.

The patch remediates this by modifying resolveContainedPath to use fs.realpathSync. This ensures that the canonical path, with all symlinks resolved, is checked for containment within the trusted base directory, effectively closing the path traversal loophole.

Vulnerable functions

resolveContainedPath

src/gateway/hooks-mapping.ts

This un-exported function contained the core logic flaw. It was responsible for validating if a given path was within a trusted base directory. The original implementation only performed lexical path comparisons and did not resolve symbolic links. This allowed an attacker to craft a path containing a symlink that pointed to a location outside the intended directory, bypassing the security check and leading to a path traversal vulnerability.

resolveHookMappings

src/gateway/hooks-mapping.ts

This exported function is the entry point for processing webhook configurations. It utilizes the vulnerable `resolveContainedPath` function to validate user-provided paths for transform modules, including `hooks.transformsDir` and individual module paths. By supplying a configuration that points to a symlink, an attacker could cause this function to approve a malicious path that escapes the trusted directory. The application would later import and execute the module from this path, resulting in arbitrary code execution with the privileges of the gateway process.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.

N/A

-

Basic Information

Basic Information

Concerned about an active attack path?

GHSA-659f-22xc-98f2: OpenClaw hook transform path containment missed symlink-resolved escapes

Vulnerability

Affected Packages / Versions

Impact

Attack Preconditions

Remediation

Fix Commit(s)

GHSA-659f-22xc-98f2:

N/A

-

Basic Information

Basic Information

Is this CVE running in your environment?

Technical Details

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Vulnerability IntelligenceMiggo AI

Unlock WAF rules for this CVE

WAF Protection Rules

WAF Rule

Reasoning

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Basic Information

Basic Information

GHSA-659f-22xc-98f2: OpenClaw hook transform path containment missed symlink-resolved escapes

Vulnerability

Affected Packages / Versions

Impact

Attack Preconditions

Remediation

Fix Commit(s)

Technical Details

N/A

N/A

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI