CVE-2026-25475 OpenClaw Vulnerable to Local File Inclusion via MEDIA: Path Extraction

Medium 6.5 Published 4 Feb 2026 Updated 5 Feb 2026

An attacker can read arbitrary files on the system by exploiting path traversal in the media parsing function, leading to sensitive data disclosure.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2026-25475?

CVE-2026-25475 is a medium-severity path traversal vulnerability in Openclaw Openclaw, published on 4 Feb 2026. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

OpenClaw is a personal AI assistant. Prior to version 2026.1.30, the isValidMedia() function in src/media/parse.ts allows arbitrary file paths including absolute paths, home directory paths, and directory traversal sequences. An agent can read any file on the system by outputting MEDIA:/path/to/file, exfiltrating sensitive data to the user/channel. This issue has been patched in version 2026.1.30.

Weakness: CWE-22, CWE-200

Which versions are affected by CVE-2026-25475?

2 open source packages ship an affected version, including openclaw. It affects 1 product.

Package	Affected	Fixed in
`openclaw` npm	All versions	`2026.1.30`
`openclaw` npm	All versions	`2026.1.30`

Products include Openclaw Openclaw.

How do I fix CVE-2026-25475?

Upgrade openclaw to 2026.1.30 or later.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2026-25475 being exploited?

There is no known exploitation of CVE-2026-25475 in the wild and no public exploit code.

All Openclaw Openclaw vulnerabilities

Sources

Also known as GHSA-r8g4-86fx-92mq.