CVE-2026-32054

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.2.25

Description The software contains a symlink traversal issue in how browser trace and download output paths are handled. This allows a local attacker to bypass the managed temporary directory. An attacker with local access can create symlinks to redirect file writes outside the intended temporary directory, potentially overwriting arbitrary files on the system.

Recommendations Update OpenClaw to version 2026.2.25 or later.