{"data":{"id":"fc2eed45-330e-4a1d-aa46-135c25ecc96e","title":"GHSA-66r7-m7xm-v49h: OpenClaw: QQBot media tags could read arbitrary local files through reply text","summary":"The openclaw npm package, versions below 2026.4.10, let QQBot outbound media tags in AI reply text reference host-local paths outside the intended media storage boundary. This allowed local file disclosure through outbound media handling, and the fix enforces the boundary for all outbound QQBot local file paths.","solution":"Fixed in v2026.4.10 (PR #63271, commit 604777e4414cc3b2ff8861f18f4fb04374c702c6). Users should upgrade to openclaw 2026.4.10 or newer; the latest npm release, 2026.4.14, already includes the fix.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-66r7-m7xm-v49h","publishedAt":"2026-04-17T22:17:05.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["openclaw@< 2026.4.10 (fixed: 2026.4.10)"],"affectedPackageNames":["openclaw"],"affectedPackageRefs":["npm:openclaw"],"affectedVendors":[],"affectedVendorsRaw":["OpenClaw","QQBot"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":["GHSA-66r7-m7xm-v49h"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-04-17T22:17:05.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality"],"aiComponentTargeted":"plugin","llmSpecific":true,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null}}