Description
OpenClaw versions 2026.4.7 before 2026.4.10 fail to normalize Discord event cover image parameters in sandbox media processing. Attackers can bypass media normalization to inject host-local media references into channel action paths expecting normalized media.
Published: 2026-05-05
Score: 4.9 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

OpenClaw versions prior to 2026.4.10 fail to normalize Discord event cover image parameters during media sandboxing. Attackers can inject host-relative or local media references into channel action paths that expect sanitized media. This flaw can allow the application to access files on the host filesystem that are outside the intended media directory, potentially revealing sensitive data or executing unintended code. The weakness is identified as CWE‑184.

Affected Systems

The affected product is OpenClaw, specifically all 2026.4.7, 2026.4.8, and 2026.4.9 releases. The issue applies to installations that have not been upgraded to 2026.4.10 or newer. The CPE listing for the product is cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*.

Risk and Exploitability

The CVSS base score of 4.9 indicates moderate severity. Because no EPSS score is available and the vulnerability is not listed in the CISA KEV catalog, the likelihood of exploitation is uncertain, but an attacker can create or influence a Discord event with a malicious cover image URL to trigger the bypass. The flaw is exploitable by anyone who can control the event, potentially leading to arbitrary file disclosure on the host running OpenClaw.

Generated by OpenCVE AI on May 5, 2026 at 12:23 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade OpenClaw to version 2026.4.10 or later to apply the vendor patch.
  • If upgrading is not possible, disable the processing of Discord event cover images or restrict the feature to verified sources until the patch is applied.
  • Add server‑side validation to reject host‑relative or absolute file paths in media URLs before they reach the sandbox, thereby preventing the bypass.

Generated by OpenCVE AI on May 5, 2026 at 12:23 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Github GHSA Github GHSA GHSA-c9h3-5p7r-mrjh OpenClaw: Discord event cover images bypassed sandbox media normalization
History

Tue, 05 May 2026 13:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 05 May 2026 11:45:00 +0000

Type Values Removed Values Added
Description OpenClaw versions 2026.4.7 before 2026.4.10 fail to normalize Discord event cover image parameters in sandbox media processing. Attackers can bypass media normalization to inject host-local media references into channel action paths expecting normalized media.
Title OpenClaw 2026.4.7 < 2026.4.10 - Sandbox Media Normalization Bypass via Discord Event Cover Image
First Time appeared Openclaw
Openclaw openclaw
Weaknesses CWE-184
CPEs cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*
Vendors & Products Openclaw
Openclaw openclaw
References
Metrics cvssV3_1

{'score': 7.7, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N'}

cvssV4_0

{'score': 4.9, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N'}

Subscriptions

Openclaw Openclaw
cve-icon MITRE

Status: PUBLISHED

Assigner: VulnCheck

Published:

Updated: 2026-05-05T12:21:37.561Z

Reserved: 2026-05-01T16:56:19.947Z

Link: CVE-2026-43532

cve-icon Vulnrichment

Updated: 2026-05-05T12:21:34.058Z

cve-icon NVD

Status : Received

Published: 2026-05-05T12:16:19.473

Modified: 2026-05-05T12:16:19.473

Link: CVE-2026-43532

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-05-05T13:45:25Z

Weaknesses