CVE-2026-102806
OpenClaw before 2026.9.5 Sandbox Isolation Bypass via Media Pipelines
OpenClaw OpenClaw
CVSS
6.0MediumExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.25%Chance of exploitation activity in the next 30 days, higher than 15% of CVEs. Scored 23 Oct 2026FIRST EPSS
What fixes it
- 2026.9.5OpenClawCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
OpenClaw before 2026.9.5 contains an incorrect authorization vulnerability in the Gateway's local media root allowlist that breaks filesystem isolation between sandboxed sessions. Sandboxed sessions or untrusted content can cause the Gateway to read files from sibling session sandboxes or shared workspace directories through media pipeline functions that fail to restrict reads to the active session.
Text from CVE List
Affected versions 2
- OpenClawaffected: all versions before 2026.9.5CVE List
- OpenClawunaffected: 2026.9.5CVE List
References 7
- github.com/openclaw/openclaw/pull/144347Fixvia CVE List
- github.com/openclaw/openclaw/commit/fca04893b5b337d2eb70a6ba41f03fc8e33eff83Fixvia CVE List
- vulncheck.com/advisories/openclaw-before-2026.9.5-sandbox-isolation-bypass-via-media-pipelinesAdvisoryvia CVE List
- github.com/openclaw/openclaw/blob/3a9d69db306cd7f081e06254cb89c4bcc14a7107/src/media/local-roots.ts#L33-L60Referencevia CVE List
- github.com/openclaw/openclaw/blob/3a9d69db306cd7f081e06254cb89c4bcc14a7107/src/media-understanding/runner.attachments.ts#L40-L50Referencevia CVE List
- docs.openclaw.ai/releases/2026.9.5Referencevia CVE List
- github.com/openclaw/openclawReferencevia CVE List