High
OpenClaw before 2026.8.1 Local File Read via Outbound Attachments
Type: advisorySource: Official CVE List
OpenClaw (npm package 'openclaw') before 2026.8.1 does not apply the originating sender's global or per-agent toolsBySender policy when handling outbound attachments. A sender that has been explicitly denied filesyste…
Products: OpenClawCVEs: CVE-2026-100538