N/A

CVSS Score

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-c9h3-5p7r-mrjh

GHSA-c9h3-5p7r-mrjh: OpenClaw: Discord event cover images bypassed sandbox media normalization

Summary

Discord event cover images bypassed sandbox media normalization.

Affected Packages / Versions

Package: openclaw
Ecosystem: npm
Affected versions: >= 2026.4.7 < 2026.4.10
Patched versions: >= 2026.4.10

Impact

Discord event cover image parameters could bypass the sandbox media normalization path used for outbound local media, allowing host-local media references to reach a channel action path that expected normalized media.

Technical Details

The fix includes Discord eventCreate.image in sandbox media normalization and adds coverage for the event-create media path.

Fix

The issue was fixed in #64377. The first stable tag containing the fix is v2026.4.10, and openclaw@2026.4.14 includes the fix.

Fix Commit(s)

979c6f09d6fad96596feb91c905934be7e0b4f15
PR: #64377

Release Process Note

Users should upgrade to openclaw 2026.4.10 or newer. The latest npm release, 2026.4.14, already includes the fix.

Credits

Thanks to @zsxsoft, with sponsorship from @KeenSecurityLab and @qclawer for reporting this issue.

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-c9h3-5p7r-mrjh

GHSA-c9h3-5p7r-mrjh:

N/A

CVSS Score

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	>= 2026.4.7, < 2026.4.10	2026.4.10

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability is a path traversal issue within the openclaw package, specifically affecting the handling of Discord event cover images. The root cause is the failure to sanitize the image parameter associated with Discord events when the application is running in a sandboxed media environment. The analysis of the patch commit 979c6f09d6fad96596feb91c905934be7e0b4f15 reveals that the fix was applied in src/infra/outbound/message-action-params.ts. The core of the fix is the addition of the string "image" to the SANDBOX_MEDIA_PARAM_KEYS constant. This constant is used by the normalizeSandboxMediaParams function to determine which parameters in a request should be subjected to path normalization. Before the patch, this function would ignore the image parameter, allowing a specially crafted path to bypass the sandbox and access local files on the host system. Therefore, the normalizeSandboxMediaParams function is the key function related to this vulnerability. During an exploit, this function would be present in the call stack but would fail to perform its intended sanitization on the malicious input.

Vulnerable functions

normalizeSandboxMediaParams

src/infra/outbound/message-action-params.ts

The vulnerability lies in the `normalizeSandboxMediaParams` function, which is responsible for sanitizing media-related parameters. This function uses the `SANDBOX_MEDIA_PARAM_KEYS` constant to identify which parameters to process. Prior to the fix, this constant did not include the `image` key. As a result, when a Discord event was created, the `image` parameter, which could contain a malicious file path, was not sanitized. This allowed a path traversal vulnerability, as the unsanitized path could reference local files outside the intended sandbox directory. The patch fixes this by adding `image` to `SANDBOX_MEDIA_PARAM_KEYS`, ensuring that `normalizeSandboxMediaParams` properly sanitizes the event cover image path.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.

N/A

-

Basic Information

Basic Information

Concerned about an active attack path?

GHSA-c9h3-5p7r-mrjh: OpenClaw: Discord event cover images bypassed sandbox media normalization

Summary

Affected Packages / Versions

Impact

Technical Details

Fix

Fix Commit(s)

Release Process Note

Credits

GHSA-c9h3-5p7r-mrjh:

N/A

-

Basic Information

Basic Information

Is this CVE running in your environment?

Technical Details

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Vulnerability IntelligenceMiggo AI

Unlock WAF rules for this CVE

WAF Protection Rules

WAF Rule

Reasoning

Technical Details

GHSA-c9h3-5p7r-mrjh: OpenClaw: Discord event cover images bypassed sandbox media normalization

Summary

Affected Packages / Versions

Impact

Technical Details

Fix

Fix Commit(s)

Release Process Note

Credits

Basic Information

Basic Information

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

N/A

N/A

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI