CVE-2026-35668 OpenClaw < 2026.3.24 - Sandbox Media Root Bypass via Unnormalized mediaUrl and fileUrl Parameters

What is CVE-2026-35668?

CVE-2026-35668 is a high-severity path traversal vulnerability in Openclaw Openclaw, published on 10 Apr 2026. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

OpenClaw before 2026.3.24 contains a path traversal vulnerability in sandbox enforcement allowing sandboxed agents to read arbitrary files from other agents' workspaces via unnormalized mediaUrl or fileUrl parameter keys. Attackers can exploit incomplete parameter validation in normalizeSandboxMediaParams and missing mediaLocalRoots context to access sensitive files including API keys and configuration data outside designated sandbox roots.

Weakness: CWE-22

Which versions are affected by CVE-2026-35668?

2 open source packages ship an affected version, including openclaw. It affects 1 product.

Products include Openclaw Openclaw.

How do I fix CVE-2026-35668?

Upgrade openclaw to 2026.3.24 or later.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2026-35668 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-35668 exists.

Other vulnerabilities in Openclaw Openclaw

• CVE-2026-28363 Security feature bypass in OpenClaw Critical 9.9
• CVE-2026-30741 Code injection in n/a Critical 9.8
• CVE-2026-33579 OpenClaw < 2026.3.28 - Privilege Escalation via Missing Caller Scope Validation in Device Pair Approval Critical 9.4
• CVE-2026-32922 OpenClaw < 2026.3.11 - Privilege Escalation via Unvalidated Scope in device.token.rotate Critical 9.4
• CVE-2026-32978 OpenClaw < 2026.3.11 - Approval Bypass via Unrecognized Script Runners Critical 9.4

All Openclaw Openclaw vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-hr5v-j9h9-xjhg, MINI-q66w-f7x6-grqh.