CVE-2026-41383 | OpenClaw up to 2026.4.1 remoteWorkspaceDir/remoteAgentWorkspaceDir path traversal (GHSA-m34q-h93w-vg5x)

April 28, 2026 Yanac

A vulnerability, which was classified as critical, has been found in OpenClaw up to 2026.4.1. This vulnerability affects unknown code. The manipulation of the argument remoteWorkspaceDir/remoteAgentWorkspaceDir leads to path traversal.

This vulnerability is documented as CVE-2026-41383. The attack can be initiated remotely. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More