CVE-2026-35632— OpenClaw <= 2026.2.22 - Symlink Traversal via IDENTITY.md appendFile in agents.create/update
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-35632
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
OpenClaw <= 2026.2.22 - Symlink Traversal via IDENTITY.md appendFile in agents.create/update
Source: NVD (National Vulnerability Database)
Vulnerability Description
OpenClaw through 2026.2.22 contains a symlink traversal vulnerability in agents.create and agents.update handlers that use fs.appendFile on IDENTITY.md without symlink containment checks. Attackers with workspace access can plant symlinks to append attacker-controlled content to arbitrary files, enabling remote code execution via crontab injection or unauthorized access via SSH key manipulation.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
CWE-61
Source: NVD (National Vulnerability Database)
Vulnerability Title
OpenClaw 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
OpenClaw是OpenClaw开源的一个智能人工助理。 OpenClaw 2026.2.22及之前版本存在安全漏洞，该漏洞源于agents.create和agents.update处理程序存在符号链接遍历问题，可能导致远程代码执行或未经授权的访问。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-35632
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-35632
请登录查看更多情报信息。
Same Patch Batch · OpenClaw · 2026-04-09 · 25 CVEs total
| CVE-2026-35638 | 8.8 HIGH | OpenClaw < 2026.3.22 - Privilege Escalation via Self-Declared Scopes in Trusted-Proxy Cont |
| CVE-2026-35639 | 8.8 HIGH | OpenClaw < 2026.3.22 - Privilege Escalation via device.pair.approve Scope Validation |
| CVE-2026-35645 | 8.1 HIGH | OpenClaw < 2026.3.25 - Privilege Escalation via Synthetic operator.admin in deleteSession |
| CVE-2026-34512 | 8.1 HIGH | OpenClaw < 2026.3.25 - Improper Access Control in /sessions/:sessionKey/kill Endpoint |
| CVE-2026-35625 | 7.8 HIGH | OpenClaw < 2026.3.25 - Privilege Escalation via Silent Local Shared-Auth Reconnect |
| CVE-2026-35629 | 7.4 HIGH | OpenClaw < 2026.3.25 - Server-Side Request Forgery via Unguarded Configured Base URLs in C |
| CVE-2026-35637 | 7.3 HIGH | OpenClaw < 2026.3.22 - Premature Cite Expansion Before Authorization in Channel and DM |
| CVE-2026-35644 | 6.5 MEDIUM | OpenClaw < 2026.3.22 - Credential Exposure via baseUrl Fields in Gateway Snapshots |
| CVE-2026-35636 | 6.5 MEDIUM | OpenClaw 2026.3.11 < 2026.3.25 - Session Isolation Bypass via sessionId Resolution |
| CVE-2026-35631 | 6.5 MEDIUM | OpenClaw < 2026.3.22 - Missing Authorization Enforcement in Internal ACP Chat Commands |
| CVE-2026-35627 | 6.5 MEDIUM | OpenClaw < 2026.3.22 - Unauthenticated Cryptographic Work in Nostr Inbound DM Handling |
| CVE-2026-35618 | 6.5 MEDIUM | OpenClaw < 2026.3.23 - Replay Identity Drift via Query-Only Variants in Plivo V2 Verificat |
| CVE-2026-35622 | 5.9 MEDIUM | OpenClaw < 2026.3.22 - Improper Authentication Verification in Google Chat Webhook |
| CVE-2026-35633 | 5.3 MEDIUM | OpenClaw < 2026.3.22 - Unbounded Memory Allocation via Remote Media Error Responses |
| CVE-2026-35640 | 5.3 MEDIUM | OpenClaw < 2026.3.25 - Denial of Service via Unauthenticated Webhook Request Parsing |
| CVE-2026-35626 | 5.3 MEDIUM | OpenClaw < 2026.3.22 - Unauthenticated Resource Exhaustion via Voice Call Webhook |
| CVE-2026-35634 | 5.1 MEDIUM | OpenClaw < 2026.3.23 - Authentication Bypass via Local-Direct Requests in Canvas Gateway |
| CVE-2026-35628 | 4.8 MEDIUM | OpenClaw < 2026.3.25 - Brute-Force Attack via Missing Telegram Webhook Rate Limiting |
| CVE-2026-35646 | 4.8 MEDIUM | OpenClaw < 2026.3.25 - Pre-Authentication Rate-Limit Bypass in Webhook Token Validation |
| CVE-2026-35623 | 4.8 MEDIUM | OpenClaw < 2026.3.25 - Brute-Force Attack via Missing Webhook Password Rate Limiting |
Showing top 20 of 25 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: OpenClaw
- CVE-2026-44118
OpenClaw < 2026.4.22 - Owner Context Spoofing via Bearer Tok - CVE-2026-44116
OpenClaw < 2026.4.22 - Server-Side Request Forgery in Zalo P - CVE-2026-44117
OpenClaw < 2026.4.20 - Server-Side Request Forgery in QQBot - CVE-2026-44115
OpenClaw < 2026.4.22 - Shell Expansion Bypass in Unquoted He - CVE-2026-44114
OpenClaw < 2026.4.20 - Environment Variable Namespace Collis
Same vendor: OpenClaw
- CVE-2026-44118
OpenClaw < 2026.4.22 - Owner Context Spoofing via Bearer Tok - CVE-2026-44116
OpenClaw < 2026.4.22 - Server-Side Request Forgery in Zalo P - CVE-2026-44117
OpenClaw < 2026.4.20 - Server-Side Request Forgery in QQBot - CVE-2026-44115
OpenClaw < 2026.4.22 - Shell Expansion Bypass in Unquoted He - CVE-2026-44114
OpenClaw < 2026.4.20 - Environment Variable Namespace Collis
Same weakness: CWE-61
- CVE-2026-29203
cPanel 安全漏洞 - CVE-2026-42275
zrok: WebDAV drive backend follows symlinks outside DriveRoo - CVE-2026-31893
Tunnelblick arbitrary file read via symlink following in tun - CVE-2026-7832
IObit Advanced SystemCare Service ASC.exe symlink - CVE-2026-43570
OpenClaw 2026.3.22 < 2026.4.5 - Symlink Traversal in Remote
V. Comments for CVE-2026-35632
No comments yet