Exploitation ongoing with high activity in latest observed window (1 mentions)
Recommended action window: Immediate (within 24h)
NVD description
OpenClaw before 2026.4.10 contains an arbitrary file read vulnerability in QQBot media tags that allows attackers to reference host-local paths outside the intended media storage boundary. Attackers can craft malicious reply text containing media tags to disclose arbitrary local files through outbound media handling.
Priority
LOW
Exploitation
ACTIVE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-05-05 | 1 | General1 |
| 2026-05-06 | 1 | Active Exploitation1 |
CVE-2026-43533 OpenClaw before 2026.4.10 contains an arbitrary file read vulnerability in QQBot media tags that allows attackers to reference host-local paths outside the intended m… https://www.cve.org/CVERecord?id=CVE-2026-43533
Post summary
The post only references CVE-2026-43533 and describes it as an arbitrary file read vulnerability in OpenClaw QQBot, without indicating PoC, exploitation, or mitigation.
Some increased actor activities are shown targeting OpenClaw (CVE-2026-43533) https://vuldb.com/vuln/361164/cti
Post summary
Reports indicate increased actor activity targeting CVE-2026-43533 in OpenClaw, implying that this vulnerability is being actively exploited in the wild.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openclaw | openclaw | - | node.js | - |