| Package | Affected versions | Patched versions |
|---|---|---|
| openclaw | < 2026.3.24 | 2026.3.24 |
| openclaw | < 2026.3.24 | 2026.3.24 |
The message tool accepted mediaUrl and fileUrl aliases without applying the same sandbox localRoots validation as the canonical media path handling.
A caller constrained to sandbox media roots could read arbitrary local files by routing them through the alias parameters.
src/infra/outbound/message-action-params.ts, src/infra/outbound/message-action-runner.ts
< 2026.3.24>= 2026.3.242026.3.28 contains the fix.Fixed by commit 1d7cb6fc03 (fix: close sandbox media root bypass for mediaUrl/fileUrl aliases).
OpenClaw thanks @AntAISecurityLab for reporting.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free