CVE-2026-32013: OpenClaw gateway agents.files symlink escape allowed out-of-workspace file read/write
(updated )
The gateway agents.files.get and agents.files.set methods allowed symlink traversal for allowlisted workspace files. A symlinked allowlisted file (for example AGENTS.md) could resolve outside the agent workspace and be read/written by the gateway process.
This could enable arbitrary host file read/write within the gateway process permissions, and chained impact up to code execution depending on which files are overwritten.
References
- github.com/advisories/GHSA-fgvx-58p6-gjwc
- github.com/openclaw/openclaw
- github.com/openclaw/openclaw/commit/125f4071bcbc0de32e769940d07967db47f09d3d
- github.com/openclaw/openclaw/security/advisories/GHSA-fgvx-58p6-gjwc
- nvd.nist.gov/vuln/detail/CVE-2026-32013
- www.vulncheck.com/advisories/openclaw-symlink-traversal-in-agents-files-methods
Code Behaviors & Features
Detect and mitigate CVE-2026-32013 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →