| Package | Affected versions | Patched versions |
|---|---|---|
| openclaw | < 2026.3.22 | 2026.3.22 |
OpenClaw before 2026.3.22 contains a path traversal vulnerability in Windows media loaders that accepts remote-host file URLs and UNC-style paths before local-path validation. Attackers can exploit this by providing network-hosted file targets that are treated as local content, bypassing intended access restrictions.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free