CVE-2026-35632: OpenClaw <= 2026.2.22 - Symlink Traversal via IDENTITY.md appendFile in agents.create/update
OpenClaw through 2026.2.22 contains a symlink traversal vulnerability in agents.create and agents.update handlers that use fs.appendFile on IDENTITY.md without symlink containment checks. Attackers with workspace access can plant symlinks to append attacker-controlled content to arbitrary files, enabling remote code execution via crontab injection or unauthorized access via SSH key manipulation.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Temporarily disable or block invocation of the agents.create and agents.update handlers in OpenClaw (versions <= 2026.2.22) until a vendor-provided fix is available. Ensure the handlers cannot be triggered by workspace users while disabled.
OpenClaw (agents handlers) - affected: OpenClaw <= 2026.2.22 agents.create and agents.update handlers = disabled - Compensating control
Restrict write/create privileges in workspaces to trusted administrators only. Apply filesystem permissions, container isolation, or access controls so untrusted users cannot create or modify files or create symlinks in directories where OpenClaw agents operate.
- Operational
Search all workspaces and repository trees for symlinks named IDENTITY.md (and other symlinks introduced recently). For any symlink found, identify its target and inspect those target files for unauthorized appended content. Specifically check crontabs and SSH authorized_keys for unauthorized entries (look for recent additions or lines referencing attacker-controlled content), remove malicious entries, and rotate any affected SSH keys or credentials if compromise is detected.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-35632?
CVE-2026-35632 has been classified with a high severity due to its symlink traversal vulnerability which can be exploited by attackers.
How do I fix CVE-2026-35632?
To fix CVE-2026-35632, it's recommended to update OpenClaw to version 2026.2.23 or later where the symlink containment checks are implemented.
What type of vulnerability is CVE-2026-35632?
CVE-2026-35632 is a symlink traversal vulnerability that affects the agents.create and agents.update handlers.
Who is affected by CVE-2026-35632?
CVE-2026-35632 affects all versions of OpenClaw prior to 2026.2.22.
What could happen if CVE-2026-35632 is exploited?
If exploited, CVE-2026-35632 could allow an attacker to manipulate files in unintended directories, potentially leading to unauthorized access or data alteration.