Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2026-42424

OpenClaw before 2026.4.8 treats shared reply MEDIA paths as trusted, allowing crafted references to trigger cross-channel local file exfiltration. Attackers can exploit this by crafting malicious shared reply MEDIA references to cause another channel to read local file paths as trusted generated media.

VectorLOCAL

PublishedApr 28, 2026, 19:37

Published Bydisclosure@vulncheck.com

Base Score

Score5

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

openclaw(npm)02026.4.8N/A

References

https://github.com/openclaw/openclaw/commit/d7c3210cd6f5fdfdc1beff4c9541673e814354d5
https://github.com/openclaw/openclaw/security/advisories/GHSA-qqq7-4hxc-x63c
https://www.vulncheck.com/advisories/openclaw-local-file-exfiltration-via-shared-reply-media-paths

Weakness Type

CWE-73

CVSS Metrics

Base Score

5.9

Vector String

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Base SeverityMedium

Version

4.0

Attack Vector (AV)

NETWORK