Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenClaw versions 2026.3.22 before 2026.4.5 contain a symlink traversal vulnerability in remote marketplace repository path handling that allows attackers to escape the expected repository root. Attackers can exploit this by providing crafted symlink paths to access files outside the intended repository directory.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-43570 Symlink Traversal in OpenClaw Remote Marketplace Repository Path Handling https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-43570
Post summary
The text announces CVE-2026-43570, a symlink traversal flaw in OpenClaw’s Remote Marketplace, and links to a detailed vulnerability page.
CVE-2026-43570 OpenClaw versions 2026.3.22 before 2026.4.5 contain a symlink traversal vulnerability in remote marketplace repository path handling that allows attackers to escape t… https://www.cve.org/CVERecord?id=CVE-2026-43570
Post summary
CVE-2026-43570 is a symlink traversal vulnerability in OpenClaw’s remote marketplace repository handling, affecting versions up to 2026.4.5.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openclaw | openclaw | - | node.js | - |