CVE-2026-41370

OpenClaw is affected by a path traversal vulnerability in ACP dispatch prior to version 2026.3.31. An attacker can manipulate inbound channel attachment paths to read arbitrary files, bypassing attachment-cache and root-directory checks to access locations outside the intended directories. This i...