CVE-2026-44996

3.7 Faible

Publiée le 11/05/2026 à 20:16 · Modifiée le 17/06/2026 à 12:51 · Analysée par le NVD · Source : disclosure@vulncheck.com

Description

OpenClaw before 2026.4.15 contains an arbitrary local file read vulnerability in the webchat audio embedding helper that fails to apply local media root containment checks. Attackers can influence agent or tool-produced ReplyPayload.mediaUrl parameters to resolve absolute local paths or file URLs, read audio-like files, and embed them base64-encoded into webchat responses.

Traduire en français

Produits concernés

Scores CVSS

Version	Score	Source	Vecteur
4.0	6.3 Moyenne	disclosure@vulncheck.com	`CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X`
3.1	3.7 Faible	disclosure@vulncheck.com	`CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N`

Faiblesses (CWE)

CWE-22

Références

https://github.com/openclaw/openclaw/commit/6e58f1f9f54bca1fea1268ec0ee4c01a2af03dde Patch
https://github.com/openclaw/openclaw/security/advisories/GHSA-gfg9-5357-hv4c Third Party Advisory
https://www.vulncheck.com/advisories/openclaw-arbitrary-local-file-read-via-webchat-audio-embedding PatchThird Party Advisory

CVE-2026-44996

Description

Produits concernés

Scores CVSS

Faiblesses (CWE)

Références

Ailleurs