CVE-2026-43532

4.9 mediumEPSS 0.3%

Medium (4.9) in openclaw openclaw. EPSS 0.3% chance of exploitation in the next 30 days. Fixed in openclaw 2026.4.10.

OpenClaw versions 2026.4.7 before 2026.4.10 fail to normalize Discord event cover image parameters in sandbox media processing. Attackers can bypass media normalization to inject host-local media references into channel action paths expecting normalized media.

Severity

CVSS 4.0

4.9 medium

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N

CVSS 3.1

7.7 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 17% of CVEs (scores of 2026-10-31)
CWE: CWE-184
Published: 2026-05-05
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

openclaw:openclaw

Packages (OSV)

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-c9h3-5p7r-mrjh	npm	openclaw	>=2026.4.7 <2026.4.10	2026.4.10

References

https://github.com/openclaw/openclaw/commit/979c6f09d6fad96596feb91c905934be7e0b4f15
https://github.com/openclaw/openclaw/security/advisories/GHSA-c9h3-5p7r-mrjh
https://www.vulncheck.com/advisories/openclaw-sandbox-media-normalization-bypass-via-discord-event-cover-image

Check your stack JSON