{"id":"CVE-2026-32033","aliases":["GHSA-27cr-4p5m-74rj"],"url":"https://o3.security/vulnerability/CVE-2026-32033","summary":"OpenClaw < 2026.2.24 - Path Traversal via @-prefixed Absolute Paths in Workspace Boundary Validation","details":"A workspace-only file-system guard mismatch allowed `@`-prefixed absolute paths to bypass boundary validation in some tool path checks.\n\n### Impact\nWhen `tools.fs.workspaceOnly=true`, certain `@`-prefixed absolute paths (for example `@/etc/passwd`) could be validated before canonicalization while runtime path handling normalized the prefix differently. In affected code paths this could permit reads outside the intended workspace boundary.\n\nPer `SECURITY.md`, OpenClaw is primarily a personal-assistant runtime with trusted-user assumptions, and this path is gated behind non-default sandbox/tooling configuration. That reduces practical exposure, but the bypass is still a security bug and is fixed.\n\n### Affected Packages / Versions\n- Package: `openclaw` (npm)\n- Latest published at triage time: `2026.2.23`\n- Affected versions: `<= 2026.2.23`\n- Patched versions: `>= 2026.2.24`\n\n### Fix Commit(s)\n- `9ef0fc2ff8fa7b145d1e746d6eb030b1bf692260`\n\nOpenClaw thanks @tdjackey for reporting.","published":"2026-03-19T22:07:08.552Z","modified":"2026-10-28T02:31:10.177587259Z","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"npm","name":"openclaw","fixedVersion":"2026.2.24"}],"fix":{"url":"https://github.com/openclaw/openclaw/commit/9ef0fc2ff8fa7b145d1e746d6eb030b1bf692260","label":"openclaw/openclaw@9ef0fc2"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/32xxx/CVE-2026-32033.json"},{"type":"ADVISORY","url":"https://github.com/openclaw/openclaw/security/advisories/GHSA-27cr-4p5m-74rj"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-32033"},{"type":"ADVISORY","url":"https://www.vulncheck.com/advisories/openclaw-path-traversal-via-prefixed-absolute-paths-in-workspace-boundary-validation"},{"type":"FIX","url":"https://github.com/openclaw/openclaw/commit/9ef0fc2ff8fa7b145d1e746d6eb030b1bf692260"},{"type":"PACKAGE","url":"https://github.com/openclaw/openclaw"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-10-28T02:31:10.177587259Z"}}