GHSA-xmv6-r34m-62p4: OpenClaw: Sandbox media fallback tmp symlink alias bypass allows host file reads outside sandboxRoot

March 3, 2026

A sandbox path validation bypass in openclaw allows host file reads outside sandboxRoot via the media path fallback tmp flow when the fallback tmp root is a symlink alias.

References

github.com/advisories/GHSA-xmv6-r34m-62p4
github.com/openclaw/openclaw
github.com/openclaw/openclaw/commit/496a76c03ba85e15ea715e5a583e498ae04d36e3
github.com/openclaw/openclaw/security/advisories/GHSA-xmv6-r34m-62p4

Code Behaviors & Features

Detect and mitigate GHSA-xmv6-r34m-62p4 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →