OpenClaw versions before 2026.2.17 have a path traversal vulnerability in the $include directive that allows an attacker with the ability to modify configuration files to read arbitrary local files outside the intended configuration directory. An attacker can supply absolute paths, traversal sequences, or symlinks in the $include directive to gain read access to files that the OpenClaw process user can read, including API keys, credentials, and other sensitive data. This results in confidentiality compromise for any files accessible to the OpenClaw process.

Affected systems are installations of the OpenClaw application from the openclaw:openclaw vendor. Versions earlier than 2026.2.17 are impacted. The Common Platform Enumeration entries indicate usage of any platform, including Node.js environments. Therefore, any deployment running a pre‑2026.2.17 build is susceptible.

The CVSS score is 6.7, indicating moderate severity. The EPSS score is less than 1%, suggesting a low likelihood of exploitation. The vulnerability is not present in the CISA KEV catalog. The attack vector is local, requiring the attacker to have the ability to modify configuration files or otherwise inject the $include directive. Successful exploitation would result in the attacker gaining read access to any files readable by the OpenClaw process user, which could compromise credential integrity and confidentiality. Because the flaw is an uncontrolled path traversal, it cannot be mitigated through network isolation alone.