CVE-2026-26972: OpenClaw has a Path Traversal in Browser Download Functionality
Summary
OpenClaw browser download helpers accepted an unsanitized output path. When invoked via the browser control gateway routes, this allowed path traversal to write downloads outside the intended OpenClaw temp downloads directory.
This issue is not exposed via the AI agent tool schema (no download action). Exploitation requires authenticated CLI access or an authenticated gateway RPC token.
Affected Packages / Versions
- Package: openclaw (npm) - Affected: >=2026.1.12, <=2026.2.12 - Fixed: >=2026.2.13
Details
Affected code: src/browser/pw-tools-core.downloads.ts (waitForDownloadViaPlaywright, downloadViaPlaywright).
Fixed entrypoints (as of 2026.2.13): - Gateway browser control routes /wait/download and /download now restrict path to DEFAULTDOWNLOADDIR via resolvePathWithinRoot.
Fix Commit(s)
- 7f0489e4731c8d965d78d6eac4a60312e46a9426
Mitigation
Upgrade to openclaw >=2026.2.13.
Thanks @locus-x64 for reporting.
Other sources
OpenClaw is a personal AI assistant. In versions 2026.1.12 through 2026.2.12, OpenClaw browser download helpers accepted an unsanitized output path. When invoked via the browser control gateway routes, this allowed path traversal to write downloads outside the intended OpenClaw temp downloads directory. This issue is not exposed via the AI agent tool schema (no download action). Exploitation requires authenticated CLI access or an authenticated gateway RPC token. Version 2026.2.13 fixes the issue.
— NVD
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-26972?
CVE-2026-26972 is a medium severity vulnerability due to path traversal allowing unauthorized file access.
How do I fix CVE-2026-26972?
To fix CVE-2026-26972, upgrade the OpenClaw package to version 2026.2.13 or later.
What are the affected versions for CVE-2026-26972?
CVE-2026-26972 affects OpenClaw versions from 2026.1.12 to 2026.2.12.
Is CVE-2026-26972 remotely exploitable?
Yes, CVE-2026-26972 can be exploited remotely via the browser control gateway routes, allowing for path traversal.
What is the potential impact of CVE-2026-26972?
The potential impact of CVE-2026-26972 includes unauthorized file writes outside of the intended temporary downloads directory.