CVE-2026-100533 OpenClaw CVE debrief

Who should care

Defenders and administrators of OpenClaw installations should assess exposure and prioritize remediation, especially in environments where admitted requesters have access to the workspace.

Why it matters

Defenders should care about CVE-2026-100533 because it allows admitted requesters to potentially read files outside the configured workspace boundary in OpenClaw versions before 2026.8.1. This vulnerability requires verification and remediation to prevent potential data exposure or unauthorized file reads.

• Potential unauthorized file reads outside the workspace boundary
• Possible data exposure or leakage
• Need for verification of OpenClaw version and patch application
• Potential for attackers to exploit this vulnerability if not remediated

Technical summary

The OpenClaw path traversal vulnerability allows admitted requesters to exploit canonically equivalent sibling directories to read files outside the configured workspace boundary. This is due to the tools.fs.workspaceOnly feature's handling of Unicode filename fallback, which can normalize validated parent directory components. The vulnerability requires verification and remediation to prevent potential data exposure or unauthorized file reads. Defenders should prioritize verifying and remediating this vulnerability in OpenClaw installations, especially in environments where admitted requesters have access to the workspace.

Defensive priority

Defenders should prioritize verifying and remediating this vulnerability in OpenClaw installations, especially in environments where admitted requesters have access to the workspace.

Recommended defensive actions

• Verify OpenClaw version and apply patch 2026.8.1 or later
• Restrict access to the workspace to only necessary users and services
• Monitor for suspicious activity and implement additional security measures as needed
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The CVE record and NVD entry provide details on the path traversal vulnerability in OpenClaw versions before 2026.8.1. The vulnerability allows admitted requesters to read files outside the configured workspace boundary using canonically equivalent sibling directories.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.