Vulnerability · Published Feb 4, 2026 · Assigned by GitHub_M

CVE-2026-25475OpenClaw Vulnerable to Local File Inclusion via MEDIA: Path Extraction

Medium 6.5

In plain English

A medium-severity information exposure in openclaw from openclaw. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 58% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)6.5Medium

Exploit odds (30 days)0.8%top 42.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

OpenClaw is a personal AI assistant. Prior to version 2026.1.30, the isValidMedia() function in src/media/parse.ts allows arbitrary file paths including absolute paths, home directory paths, and directory traversal sequences. An agent can read any file on the system by outputting MEDIA:/path/to/file, exfiltrating sensitive data to the user/channel. This issue has been patched in version 2026.1.30.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
npm	openclaw	2026.1.30	GHSA-r8g4-86fx-92mq

Affected products (as reported)

Vendor	Product	Versions
openclaw	openclaw	< 2026.1.30

Weakness: CWE-200, CWE-22 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

References

https://github.com/openclaw/openclaw/security/advisories/GHSA-r8g4-86fx-92mq x_refsource_CONFIRM