GHSA-f6pf-4gjx-c94r: OpenClaw: Media Parsing Path Traversal Leads to Arbitrary File Read

April 3, 2026

OpenClaw <= 2026.3.24 Media Parsing Path Traversal to Arbitrary File Read

References

github.com/advisories/GHSA-f6pf-4gjx-c94r
github.com/openclaw/openclaw
github.com/openclaw/openclaw/commit/4797bbc5b96e2cca5532e43b58915c051746fe37
github.com/openclaw/openclaw/security/advisories/GHSA-f6pf-4gjx-c94r

Code Behaviors & Features

Detect and mitigate GHSA-f6pf-4gjx-c94r with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →