MediumVulnerability
GHSA-56pc-6hvp-4gv4: OpenClaw vulnerable to arbitrary file read via $include directive
- Identifier
- GHSA-56pc-6hvp-4gv4
- Published
- Record updated
- Affected
- openclaw < 2026.2.17
- Fixed in
- 2026.2.17
- released February 17, 2026, 13 days before disclosure
Summary
A path traversal flaw (CWE-22) in OpenClaw's config `$include` resolution lets anyone who can modify the config read arbitrary local files outside the config directory. Absolute paths, `../` traversal and symlinks inside the config directory all reach external files unless real-path checks are enforced. Exposure is bounded by the OpenClaw runtime user's file permissions, and the impact includes local API keys and private config material.
Mitigation
Fixed in 2026.2.17 (patched versions `>=2026.2.17`; affected versions `<=2026.2.15`). Fix commit: d1c00dbb7c64a39e205464dae7f2a068420e91c1.
Related items
- MediumCVE-2026-121936: easyVoice server-side request forgery through openaiBaseUrl in /api/v1/ttsSimilar attack · NVD/CVE Database
- MediumCVE-2026-118628: MLflow get-artifacts server-side request forgery information disclosureSimilar attack · NVD/CVE Database
- HighCVE-2026-118625: MLflow Tracking Server privilege escalation via get_endpointsSimilar attack · NVD/CVE Database
- InfoWhen trust becomes the payload: Inside the threats, etc quarterly reportSimilar attack · Elastic Security Labs
- MediumCritical Langflow flaws enable authentication bypass and RCESimilar attack · CSO Online