{"cve":"CVE-2026-44996","nvd":{"published":"2026-05-11T18:16:39.530","modified":"2026-06-17T10:51:34.563","status":"Analyzed","description":"OpenClaw before 2026.4.15 contains an arbitrary local file read vulnerability in the webchat audio embedding helper that fails to apply local media root containment checks. Attackers can influence agent or tool-produced ReplyPayload.mediaUrl parameters to resolve absolute local paths or file URLs, read audio-like files, and embed them base64-encoded into webchat responses.","cvss_v4":{"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","score":6.3},"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","score":3.7},"cwes":["CWE-22"],"references":["https://github.com/openclaw/openclaw/commit/6e58f1f9f54bca1fea1268ec0ee4c01a2af03dde","https://github.com/openclaw/openclaw/security/advisories/GHSA-gfg9-5357-hv4c","https://www.vulncheck.com/advisories/openclaw-arbitrary-local-file-read-via-webchat-audio-embedding"],"products":["openclaw:openclaw"],"source":"nvd","synced_at":"2026-10-19T22:33:55.586217763+00:00"},"epss":{"cve":"CVE-2026-44996","score":0.00305,"percentile":0.23339,"date":"2026-11-01"},"kev":null,"osv":[{"id":"GHSA-gfg9-5357-hv4c","url":"https://osv.dev/vulnerability/GHSA-gfg9-5357-hv4c","summary":"OpenClaw: Webchat audio embedding could read local files without local-root containment","modified":"2026-07-08T08:13:04.231855873Z","packages":[{"ecosystem":"npm","name":"openclaw","purl":"pkg:npm/openclaw","ranges":["<2026.4.15"],"fixed":["2026.4.15"]}]}],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}