CVE-2026-100549 | OpenClaw up to 2026.7.2 QQBot Voice Attachment path traversal

September 26, 2026 Yanac

A vulnerability was found in OpenClaw. It has been classified as problematic. This affects an unknown part of the component QQBot Voice Attachment Handler. The manipulation leads to path traversal.

This vulnerability is referenced as CVE-2026-100549. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More