Report: CVE-2026-32060 - OpenClaw < 2026.2.14 - Path Traversal in apply_patch via Crafted Paths

Report: CVE-2026-32060 - OpenClaw < 2026.2.14 - Path Traversal in apply_patch via Crafted Paths

CVE ID :CVE-2026-32060 Published : March 11, 2026, 2:16 p.m. | 1 hour, 2 minutes ago Description :OpenClaw versions prior to 2026.2.14 contain a path traversal vulnerability in apply_patch that allows attackers to write or delete files outside the configured workspace directory. When apply_patch is enabled without filesystem sandbox containment, attackers can exploit crafted paths including directory traversal sequences or absolute paths to escape workspace boundaries and modify arbitrary files. Severity: 8.8 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
HIGH
Published
March 11, 2026
Impact: path traversal