OpenClaw versions prior to 2026.3.28 contain a path traversal vulnerability in media parsing that allows an attacker to read arbitrary files by bypassing validation in the isLikelyLocalPath() and isValidMedia() functions. Attackers can exploit incomplete checks and the allowBareFilename bypass to reference files outside the intended application sandbox, enabling disclosure of system files, environment files, and SSH keys.

The affected product is OpenClaw by OpenClaw. Versions earlier than 2026.3.28 are vulnerable, including releases up to and including 2026.3.27; the issue was addressed in the commit referenced by the advisory. No other vendors or products are listed as impacted.

The CVSS score of 8.7 indicates high severity. The EPSS score is below 1%, suggesting a relatively low probability of widespread exploitation, and the vulnerability is not included in the CISA Known Exploited Vulnerabilities list. Attackers would exploit this flaw by supplying a specially crafted media file to trigger the path traversal, which is inferred from the media parsing context. The vulnerability affects confidentiality by enabling the reading of sensitive files; integrity and availability impacts are not described in the provided information.