CVE-2026-32013: OpenClaw gateway agents.files symlink escape allowed out-of-workspace file read/write
(updated )
The gateway agents.files.get and agents.files.set methods allowed symlink traversal for allowlisted workspace files. A symlinked allowlisted file (for example AGENTS.md) could resolve outside the agent workspace and be read/written by the gateway process.
This could enable arbitrary host file read/write within the gateway process permissions, and chained impact up to code execution depending on which files are overwritten.
References
- github.com/advisories/GHSA-fgvx-58p6-gjwc
- github.com/openclaw/openclaw
- github.com/openclaw/openclaw/commit/125f4071bcbc0de32e769940d07967db47f09d3d
- github.com/openclaw/openclaw/security/advisories/GHSA-fgvx-58p6-gjwc
- nvd.nist.gov/vuln/detail/CVE-2026-32013
- www.vulncheck.com/advisories/openclaw-symlink-traversal-in-agents-files-methods
Code Behaviors & Features
Detect and mitigate CVE-2026-32013 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →