CVE-2026-22180 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

OpenClaw versions prior to 2026.3.2 contain a path-confinement bypass vulnerability in browser output handling that allows writes outside intended root director…
Medium CVSS: 4.8

CVE-2026-22180

OpenClaw versions prior to 2026.3.2 contain a path-confinement bypass vulnerability in browser output handling that allows writes outside intended root directories. Attackers can exploit insufficient canonical path-boundary validation in file write operations to escape root-bound restrictions and write files to arbitrary locations.
Vendor
Openclaw
Product
Openclaw
CWE
CWE-59
Yayın Tarihi
2026-03-18 02:16:22
Güncelleme
2026-03-20 20:51:12
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-

Kategoriler

CWE-59 Openclaw MEDIUM Openclaw 2026

Referanslar

https://github.com/openclaw/openclaw/commit/104d32bb64cdf19d5e77f70553a511a2ae90ad1c https://github.com/openclaw/openclaw/security/advisories/GHSA-3pxq-f3cp-jmxp https://www.vulncheck.com/advisories/openclaw-path-confinement-bypass-in-browser-output-and-file-write-operations