CVE-2026-43532: OpenClaw 2026.4.7 < 2026.4.10 - Sandbox Media Normalization Bypass via Discord Event Cover Image
OpenClaw versions 2026.4.7 before 2026.4.10 fail to normalize Discord event cover image parameters in sandbox media processing. Attackers can bypass media normalization to inject host-local media references into channel action paths expecting normalized media.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-43532?
CVE-2026-43532 is assessed as a high severity vulnerability, as it allows attackers to bypass media normalization and potentially execute malicious media references.
How do I fix CVE-2026-43532?
To fix CVE-2026-43532, upgrade OpenClaw to version 2026.4.10 or later, which addresses the media normalization bypass.
What are the affected versions in CVE-2026-43532?
CVE-2026-43532 affects OpenClaw versions from 2026.4.7 up to but not including 2026.4.10.
What is the impact of CVE-2026-43532 on systems?
CVE-2026-43532 may allow attackers to inject and execute host-local media references, potentially compromising system security.
Is CVE-2026-43532 specific to any platform?
CVE-2026-43532 is specific to the OpenClaw application, particularly in its handling of Discord event cover images.