---
id: CVE-2026-33581
title: >-
  OpenClaw before 2026.3.24 contains a sandbox bypass vulnerability in the
  message tool that allows attackers to read arbitrary local files by using
  mediaUrl and fileUrl alias parameters that bypass localRoots validation
summary: >-
  OpenClaw before 2026.3.24 contains a sandbox bypass vulnerability in the
  message tool that allows attackers to read arbitrary local files by using
  mediaUrl and fileUrl alias parameters that bypass localRoots validation.
  Remote attackers …
severity: medium
cvss: 6.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N'
cwe:
  - CWE-22
vendor: openclaw
product: openclaw
affected:
  - openclaw < 2026.3.24
patched:
  - openclaw 2026.3.24
published: '2026-03-31'
updated: '2026-07-24'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-33581'
references:
  - url: >-
      https://github.com/openclaw/openclaw/commit/1d7cb6fc03552bbba00e7cffb3aa9741f5556416
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/openclaw/openclaw/security/advisories/GHSA-v8wv-jg3q-qwpq
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/openclaw-arbitrary-file-read-via-mediaurl-and-fileurl-parameters
    label: disclosure@vulncheck.com
tags:
  - nvd
  - cve.org
epss: 0.00555
epssPercentile: 0.45164
ingestedAt: '2026-07-24T21:39:13.218Z'
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-03-31T14:29:20.420897Z'
---

## Overview

OpenClaw before 2026.3.24 contains a sandbox bypass vulnerability in the message tool that allows attackers to read arbitrary local files by using mediaUrl and fileUrl alias parameters that bypass localRoots validation. Remote attackers can exploit this by routing file requests through unvalidated alias parameters to access files outside the intended sandbox directory.

## Affected

- `openclaw < 2026.3.24`

## Remediation

Upgrade past the affected range:

- `openclaw 2026.3.24`