Vulnerability in OpenClaw

[ Description ]Official description

OpenClaw before 2026.9.5 contains an incorrect authorization vulnerability in the Gateway's local media root allowlist that breaks filesystem isolation between sandboxed sessions. Sandboxed sessions or untrusted content can cause the Gateway to read files from sibling session sandboxes or shared workspace directories through media pipeline functions that fail to restrict reads to the active session.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

• BSI CERT-Bund29 Sep 2026WID-SEC-2026-3673

  OpenClaw: Multiple vulnerabilities Translated from German

  CVE-2026-102806CVE-2026-102807

[ References ]References

• docs.openclaw.ai/releases/2026.9.5
• github.com/openclaw/openclaw
• github.com/openclaw/openclaw/blob/3a9d69db306cd7f081e06254cb89c4bcc14a7107/src/media-un…
• github.com/openclaw/openclaw/blob/3a9d69db306cd7f081e06254cb89c4bcc14a7107/src/media/lo…
• github.com/openclaw/openclaw/commit/fca04893b5b337d2eb70a6ba41f03fc8e33eff83
• github.com/openclaw/openclaw/pull/144347
• www.vulncheck.com/advisories/openclaw-before-2026.9.5-sandbox-isolation-bypass-via-medi…