GHSA-fgvx-58p6-gjwc: OpenClaw gateway agents.files symlink escape allowed out-of-workspace file read/write

March 2, 2026

The gateway agents.files.get and agents.files.set methods allowed symlink traversal for allowlisted workspace files. A symlinked allowlisted file (for example AGENTS.md) could resolve outside the agent workspace and be read/written by the gateway process.

This could enable arbitrary host file read/write within the gateway process permissions, and chained impact up to code execution depending on which files are overwritten.

References

github.com/advisories/GHSA-fgvx-58p6-gjwc
github.com/openclaw/openclaw
github.com/openclaw/openclaw/commit/125f4071bcbc0de32e769940d07967db47f09d3d
github.com/openclaw/openclaw/security/advisories/GHSA-fgvx-58p6-gjwc

Code Behaviors & Features

Detect and mitigate GHSA-fgvx-58p6-gjwc with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →