CVE-2026-44111: OpenClaw < 2026.4.15 - Arbitrary Markdown File Read via QMD memory_get
OpenClaw before 2026.4.15 contains an arbitrary file read vulnerability in the QMD backend memoryget function that allows callers to read any Markdown files within the workspace root. Attackers with access to the memory tool can bypass path restrictions by providing arbitrary workspace Markdown paths to read files outside canonical memory locations or indexed QMD result sets.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-44111?
CVE-2026-44111 is classified as a medium severity vulnerability due to its potential for arbitrary file reading.
How do I fix CVE-2026-44111?
To fix CVE-2026-44111, upgrade OpenClaw to version 2026.4.15 or later.
What type of vulnerability is CVE-2026-44111?
CVE-2026-44111 is an arbitrary file read vulnerability affecting the QMD backend memory_get function.
Who is affected by CVE-2026-44111?
Users of OpenClaw versions before 2026.4.15 are affected by CVE-2026-44111.
What can attackers do with CVE-2026-44111?
Attackers can exploit CVE-2026-44111 to read any Markdown files within the workspace root.