GHSA-rx3g-mvc3-qfjf: OpenClaw's avatar symlink traversal can expose out-of-workspace local files

March 3, 2026

OpenClaw avatar handling allowed a symlink traversal path that could expose local files outside an agent workspace through gateway avatar surfaces.

References

github.com/advisories/GHSA-rx3g-mvc3-qfjf
github.com/openclaw/openclaw
github.com/openclaw/openclaw/commit/3d0337504349954237d09e4d957df5cb844d5e77
github.com/openclaw/openclaw/commit/6970c2c2db3ee069ef0fff0ade5cfbdd0134f9d2
github.com/openclaw/openclaw/security/advisories/GHSA-rx3g-mvc3-qfjf

Code Behaviors & Features

Detect and mitigate GHSA-rx3g-mvc3-qfjf with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →