CVE-2026-100549 OpenClaw CVE debrief

Who should care

Defenders responsible for OpenClaw deployments should assess exposure and prioritize verification and remediation. This includes OpenClaw administrators, security teams, and IT personnel responsible for maintaining and securing OpenClaw installations. Additionally, vulnerability management teams should review and update their vulnerability management processes to address this issue.

Why it matters

CVE-2026-100549 is a path traversal vulnerability in OpenClaw versions before 2026.8.1, affecting QQBot voice attachment handling. Defenders should prioritize verifying OpenClaw versions and restricting access to voice attachment handling.

• Verify OpenClaw version and upgrade to 2026.8.1 or later
• Restrict access to voice attachment handling
• Monitor for suspicious voice attachment activity

Technical summary

OpenClaw versions before 2026.8.1 contain a path traversal vulnerability in QQBot voice attachment handling. Filenames are decoded twice, allowing encoded traversal segments to reappear after sanitization. Attackers can supply crafted voice attachments that write files outside the intended staging directory to other process-writable locations. This vulnerability can be exploited by attackers to write files to arbitrary locations, potentially leading to code execution or data tampering. Defenders should prioritize verifying OpenClaw versions and restricting access to voice attachment handling.

Defensive priority

Defenders should prioritize verifying OpenClaw versions and restricting access to voice attachment handling.

Recommended defensive actions

• Verify OpenClaw version and upgrade to 2026.8.1 or later
• Restrict access to voice attachment handling
• Monitor for suspicious voice attachment activity
• Review OpenClaw configuration and ensure proper sanitization of filenames
• Implement additional logging and monitoring for voice attachment handling
• Conduct regular security audits to identify potential vulnerabilities
• Review and update incident response plans to address potential exploitation

Evidence notes

The CVE record and NVD entry provide details on the path traversal vulnerability in OpenClaw. However, the corpus does not establish versions, exploitation, impact, or remediation beyond vendor-provided information.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.