N/A

CVSS Score

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-cfvj-7rx7-fc7c

GHSA-cfvj-7rx7-fc7c: OpenClaw: stageSandboxMedia destination symlink traversal can overwrite files outside sandbox workspace

Summary

stageSandboxMedia allowed destination symlink traversal during media staging, which could overwrite files outside the sandbox workspace root.

Impact

When sandbox media staging handled inbound files, destination writes under media/inbound were not destination-alias-safe. If a symlink existed in that destination path, the write could follow it and overwrite host files outside the intended sandbox workspace boundary.

Affected Packages / Versions

Package: openclaw (npm)
Latest published version checked: 2026.3.1
Affected: <= 2026.3.1
Patched versions: >= 2026.3.2 (released)

Root Cause

stageSandboxMedia validated source paths but wrote destination files with a direct copy path that did not enforce destination boundary/alias checks.

Remediation

The fix routes staging writes through root-scoped safe write primitives for both local and SCP-staged attachments, preventing destination symlink traversal escapes.

Fix Commit(s)

17ede52a4be3034f6ec4b883ac6b81ad0101558a

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-cfvj-7rx7-fc7c

GHSA-cfvj-7rx7-fc7c:

N/A

CVSS Score

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	<= 2026.3.1	2026.3.2

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability exists in the stageSandboxMedia function located in src/auto-reply/reply/stage-sandbox-media.ts. The function was responsible for staging media files into a sandbox workspace. The vulnerability was a path traversal issue caused by following symbolic links. The original code used fs.copyFile for local files and an scpFile helper for remote files to write to a destination path. However, it did not validate whether any component of the destination path was a symbolic link. This allowed an attacker to create a symlink within the sandbox's media/inbound directory pointing to a sensitive file elsewhere on the system. When the stageSandboxMedia function was triggered, it would follow this symlink and overwrite the target file with the content of the staged media. The patch addresses this by replacing the direct file copy operations with calls to new helper functions, stageLocalFileIntoRoot and stageRemoteFileIntoRoot. These functions utilize a safe write primitive, writeFileWithinRoot, which ensures that file writes do not escape the intended directory, thus mitigating the symlink traversal vulnerability.

Vulnerable functions

stageSandboxMedia

src/auto-reply/reply/stage-sandbox-media.ts

The function `stageSandboxMedia` was vulnerable to a symlink traversal attack because it used `fs.copyFile` and `scpFile` to write to a destination path without proper sanitization. An attacker could create a symbolic link in the `media/inbound` directory that points to a file outside the sandbox workspace. When `stageSandboxMedia` attempted to write a file, it would follow the symlink and overwrite the targeted file.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.

N/A

-

Basic Information

Basic Information

Concerned about an active attack path?

GHSA-cfvj-7rx7-fc7c: OpenClaw: stageSandboxMedia destination symlink traversal can overwrite files outside sandbox workspace

Summary

Impact

Affected Packages / Versions

Root Cause

Remediation

Fix Commit(s)

GHSA-cfvj-7rx7-fc7c:

N/A

-

Basic Information

Basic Information

Is this CVE running in your environment?

Technical Details

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Vulnerability IntelligenceMiggo AI

Unlock WAF rules for this CVE

WAF Protection Rules

WAF Rule

Reasoning

Basic Information

Basic Information

N/A

N/A

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Technical Details

GHSA-cfvj-7rx7-fc7c: OpenClaw: stageSandboxMedia destination symlink traversal can overwrite files outside sandbox workspace

Summary

Impact

Affected Packages / Versions

Root Cause

Remediation

Fix Commit(s)

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI