Vulnerability · Published Sep 29, 2026 · Assigned by VulnCheck

CVE-2026-102806OpenClaw before 2026.9.5 Sandbox Isolation Bypass via Media Pipelines

Medium 6.3

In plain English

A medium-severity incorrect authorization in OpenClaw from OpenClaw. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 17% of all known vulnerabilities).

Severity (CVSS 3.1)6.3Medium

Exploit odds (30 days)0.3%top 83.4% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

OpenClaw before 2026.9.5 contains an incorrect authorization vulnerability in the Gateway's local media root allowlist that breaks filesystem isolation between sandboxed sessions. Sandboxed sessions or untrusted content can cause the Gateway to read files from sibling session sandboxes or shared workspace directories through media pipeline functions that fail to restrict reads to the active session.

Affected products (as reported)

Vendor	Product	Versions
OpenClaw	OpenClaw	0 – before 2026.9.5

Weakness: CWE-863 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

References

Pull Request #144347 issue-tracking, patch
Patch Commit patch
https://github.com/openclaw/openclaw/blob/3a9d69db306cd7f081e06254cb89c4bcc14a7107/src/media/local-roots.ts#L33-L60 technical-description
https://github.com/openclaw/openclaw/blob/3a9d69db306cd7f081e06254cb89c4bcc14a7107/src/media-understanding/runner.attachments.ts#L40-L50 technical-description
https://docs.openclaw.ai/releases/2026.9.5 release-notes
https://github.com/openclaw/openclaw product
VulnCheck Advisory: OpenClaw before 2026.9.5 Sandbox Isolation Bypass via Media Pipelines third-party-advisory