CVE-2026-41383
OpenClaw before 2026.4.2 contains an arbitrary directory deletion vulnerability in mirror mode that allows attackers to delete remote directories by influencing remoteWorkspaceDir and remoteAgentWorkspaceDir configuration values. Attackers can manipulate these OpenShell config paths to cause mirror sync operations to delete unintended remote directory contents and replace them with uploaded workspace data.
Ver en NVDAnálisis
OpenClaw is a niche synchronization tool, and this vulnerability allows attackers to delete and replace remote directories by manipulating configuration paths. Given its limited adoption compared to mainstream CI/CD or sync tools, it does not warrant a high-priority alert for the general developer community.
Severidad
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:HCWE-22EPSS
Afecta
openclaw:openclawDescripción técnica
OpenClaw before 2026.4.2 contains an arbitrary directory deletion vulnerability in mirror mode that allows attackers to delete remote directories by influencing remoteWorkspaceDir and remoteAgentWorkspaceDir configuration values. Attackers can manipulate these OpenShell config paths to cause mirror sync operations to delete unintended remote directory contents and replace them with uploaded workspace data.