GHSA-mgrq-9f93-wpp5: OpenClaw: workspace path guard bypass on non-existent out-of-root symlink leaf

March 12, 2026

openclaw had a workspace boundary bypass in workspace-only path validation: when an in-workspace symlink pointed outside the workspace to a non-existent leaf, the first write could pass validation and create the file outside the workspace.

References

github.com/advisories/GHSA-mgrq-9f93-wpp5
github.com/openclaw/openclaw
github.com/openclaw/openclaw/commit/1aef45bc060b28a0af45a67dc66acd36aef763c9
github.com/openclaw/openclaw/commit/46eba86b45e9db05b7b792e914c4fe0de1b40a23
github.com/openclaw/openclaw/security/advisories/GHSA-mgrq-9f93-wpp5

Code Behaviors & Features

Detect and mitigate GHSA-mgrq-9f93-wpp5 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →