Vulnerability · Published Apr 9, 2026 · Assigned by VulnCheck

CVE-2026-35632OpenClaw < 2026.3.24 - Symlink Traversal via IDENTITY.md appendFile in agents.create/update

High 7.1

In plain English

A high-severity security flaw in OpenClaw from OpenClaw. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 37% of all known vulnerabilities).

Severity (CVSS 3.1)7.1High

Exploit odds (30 days)0.4%top 63.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

OpenClaw before 2026.3.24 contains a symlink traversal vulnerability in agents.create and agents.update handlers that use fs.appendFile on IDENTITY.md without symlink containment checks. Attackers with workspace access can plant symlinks to append attacker-controlled content to arbitrary files, enabling remote code execution via crontab injection or unauthorized access via SSH key manipulation.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
npm	openclaw	no fix listed	GHSA-7xr2-q9vf-x4r5

Affected products (as reported)

Vendor	Product	Versions
OpenClaw	OpenClaw	0 – before 2026.3.24

Weakness: CWE-61 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

References

GitHub Security Advisory (GHSA-7xr2-q9vf-x4r5) vendor-advisory
VulnCheck Advisory: OpenClaw < 2026.3.24 - Symlink Traversal via IDENTITY.md appendFile in agents.create/update third-party-advisory