PT-2026-48743 · Openclaw · Openclaw

CVE-2026-53813

·

Published

2026-06-11

·

Updated

2026-07-02

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.4.25
Description A path traversal issue exists in the memory-core artifact loading process, where the workspace state affects how the local package root is resolved. This allows attackers with access to affected workspaces to load memory-core artifacts from unintended local locations, which could lead to the execution of malicious code or unauthorized access to sensitive data.
Recommendations Update to version 2026.4.25.

Exploit

Fix

Uncontrolled Search Path Element

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-53813
GHSA-V8CX-933X-R976

Affected Products

Openclaw