Symlink Traversal Vulnerability in OpenClaw Remote Marketplace Repository Handling

CVE-2026-43570

What is CVE-2026-43570?

OpenClaw versions before 2026.4.5 are susceptible to a symlink traversal vulnerability which allows attackers to manipulate the remote marketplace repository path handling. By utilizing specially crafted symlink paths, malicious actors can escape the designated repository root and gain unauthorized access to files located outside the intended directory. This breach can lead to potential data exposure and security risks, making timely updates essential for users of affected versions.

References