Skip to content
Threat Feed

Tag

Unc-Path

1 brief RSS
medium advisory

OpenClaw Webchat Media Embedding Local-Root Containment Bypass

A vulnerability in OpenClaw versions 2026.4.7 to before 2026.4.15 allows a crafted tool-result media reference to cause the host to attempt local file reads or Windows UNC/network path access, potentially disclosing files or network credentials.

openclaw local-file-inclusion unc-path
2r 2t