{"data":{"id":"6289bdf0-de38-4839-9ec2-9d3c5d371d13","title":"AI SAST Finding: Path Traversal in OpenClaw via LLM Guardrail Bypass | Endor Labs","summary":"Endor Labs' AI SAST engine found GHSA-r5fq-947m-xm57, a high-severity (CVSS 8.8) path traversal in OpenClaw's apply_patch tool, affecting openclaw versions up to 2026.2.13. When sandboxRoot is not configured, as in the default for non-containerized deployments, resolvePathFromCwd() passes attacker-controlled patch paths to file system writes and deletes without a containment check, allowing arbitrary file writes and deletes outside the workspace. Exploitation requires the LLM to emit the malicious tool call, and the author reports that most of 10 bypass attempts were blocked by the model's safety behavior.","solution":"Fixed in OpenClaw. The package is listed as patched; the source does not state the fixed version or specific configuration change.","labels":["security"],"sourceUrl":"https://www.endorlabs.com/learn/ai-sast-finding-path-traversal-in-openclaw-via-llm-guardrail-bypass","publishedAt":"2026-11-11T02:21:42.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":["prompt_injection","jailbreak"],"issueType":"news","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["OpenAI"],"affectedVendorsRaw":["OpenClaw","OpenClaw apply_patch tool"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-11-11T02:21:42.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":["AML.T0051","AML.T0054"]}}