OpenClaw before 2026.4.10 contains an arbitrary file read vulnerability in QQBot media tags that allows attackers to reference host-local paths outside the intended media storag...
Date: 2026-05
Affected: openclaw/openclaw
Attack vector: path-traversal
Category: vulnerability-disclosure
Severity: High
CVE: CVE-2026-43533
CWE: CWE-23
CVSS: 8.6 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N)

OpenClaw before 2026.4.10 contains an arbitrary file read vulnerability in QQBot media tags that allows attackers to reference host-local paths outside the intended media storage boundary. Attackers can craft malicious reply text containing media tags to disclose arbitrary local files through outbound media handling.


Mitigations:

Architectural layers (MAESTRO):