CVE-2026-41911

OpenClaw < 2026.4.8 - Workspace-Only Filesystem Policy Bypass via docx upload_file/upload_image

Published Apr 28, 2026 CVSS 4.0 · 6 Medium EPSS < 1% KEV · Not listed

Description

OpenClaw before 2026.4.8 contains a filesystem policy bypass vulnerability in docx upload processing that allows local file reads outside workspace boundaries. Attackers can exploit upload_file and upload_image endpoints to access files beyond the intended workspace-only filesystem policy.

Analysis

Technical impact

OpenClaw versions prior to 2026.4.8 are vulnerable to a filesystem policy bypass during docx upload processing. The flaw allows maliciously crafted documents to be uploaded via the upload_file and upload_image endpoints, enabling attackers to read files located outside the intended workspace directory. This path traversal weakness (CWE-22) exposes the confidentiality of system files accessible to the Web server, potentially revealing sensitive information such as configuration files or credentials. The impact is limited to file read, not exploitation of arbitrary code execution, but it can compromise application confidentiality and trust.

Affected Systems

The affected product is OpenClaw by OpenClaw. Any deployment using a release before 2026.4.8 is impacted. No further version granularity is provided in the CNA data.

Risk and Exploitability

The CVSS score of 6.0 indicates moderate severity. No EPSS score is available, and the vulnerability is not listed in CISA's KEV catalog, suggesting no known exploitation activity at the time of reporting. The attack likely requires an attacker to upload a malicious docx file to either upload_file or upload_image. Successful exploitation would allow reading arbitrary local files, potentially compromising confidentiality. Patch availability and installation are the most effective mitigation measures.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

OpenClaw

unaffected

Version	Status	Constraints
`0`	affected	< 2026.4.8
`2026.4.8`	unaffected	—

Configuration 1 [-]

cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*

No data.

Vendor Product Versions

Openclaw

Version	Status	Scheme	Platform
`[0,2026.4.8)`	affected	semver	—
`2026.4.8`	unaffected	semver	—

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Upgrade OpenClaw to version 2026.4.8 or newer, which removes the vulnerable file‑handling logic.
If an upgrade is temporarily unavailable, restrict access to the upload_file and upload_image endpoints to trusted, authenticated users and validate file paths to prevent traversal beyond the workspace directory.
Review and tighten the application’s filesystem policy so that the web process can access only the intended workspace directory, using techniques such as chroot or sandboxing to enforce isolation.

Generated by OpenCVE AI on April 29, 2026 at 01:21 UTC.

Tracking

Advisories

Source	ID	Title
Github GHSA	GHSA-5fc7-f62m-8983	OpenClaw: Feishu docx upload_file/upload_image Bypasses Workspace-Only Filesystem Policy (GHSA-qf48-qfv4-jjm9 Incomplete Fix)

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Attack Requirements Present

User Interaction None

Vulnerable System Confidentiality Impact High

Vulnerable System Integrity Impact None

Vulnerable System Availability Impact None

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.327% probability within 30 days)

Exploitation none

Automatable no

Technical Impact partial

References

Link	Providers
https://github.com/openclaw/openclaw/commit/d7c3210cd6f5fdfdc1beff4c9541673e814354d5
https://github.com/openclaw/openclaw/security/advisories/GHSA-5fc7-f62m-8983
https://www.vulncheck.com/advisories/openclaw-workspace-only-filesystem-policy-bypass-via-docx-upload-file-upload-image

History

Apr 29, 2026 4:15 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Apr 28, 2026 7:15 PM Description updated. Title updated. First appearance in the feed. Weaknesses updated. Affected versions updated. Affected vendors updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		OpenClaw before 2026.4.8 contains a filesystem policy bypass vulnerability in docx upload processing that allows local file reads outside workspace boundaries. Attackers can exploit upload_file and upload_image endpoints to access files beyond the intended workspace-only filesystem policy.
Title		OpenClaw < 2026.4.8 - Workspace-Only Filesystem Policy Bypass via docx upload_file/upload_image
First Time appeared		Openclaw Openclaw openclaw
Weaknesses		CWE-22
CPEs		cpe:2.3:a:openclaw:openclaw::::::node.js::*
Vendors & Products		Openclaw Openclaw openclaw
References		https://github.com/openclaw/openclaw/commit/d7c3210cd6f5fdfdc1beff4c9541673e814354d5 https://github.com/openclaw/openclaw/security/advisories/GHSA-5fc7-f62m-8983 https://www.vulncheck.com/advisories/openclaw-workspace-only-filesystem-policy-bypass-via-docx-upload-file-upload-image
Metrics		cvssV3_1 `{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N'}` cvssV4_0 `{'score': 6, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N'}`