CVE-2026-41366: OpenClaw < 2026.3.31 - Arbitrary Host File Read via appendLocalMediaParentRoots Self-Whitelisting
OpenClaw before 2026.3.31 contains a local roots self-whitelisting vulnerability in appendLocalMediaParentRoots that allows model-initiated arbitrary host file read. Attackers can exploit improper media parent directory validation to exfiltrate credentials and access sensitive files.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-41366?
CVE-2026-41366 has a medium severity rating due to its ability to allow arbitrary file reads from the host.
How do I fix CVE-2026-41366?
To fix CVE-2026-41366, update OpenClaw to version 2026.3.31 or later.
What is the exploit mechanism of CVE-2026-41366?
The exploit mechanism for CVE-2026-41366 involves the appendLocalMediaParentRoots function allowing model-initiated access to arbitrary host files.
Which versions of OpenClaw are affected by CVE-2026-41366?
OpenClaw versions prior to 2026.3.31 are affected by CVE-2026-41366.
Can CVE-2026-41366 be exploited remotely?
No, CVE-2026-41366 is a local vulnerability that requires access to the model to exploit.