CVE-2026-53813: OpenClaw < 2026.4.25 - Arbitrary Artifact Loading via Fake Package Root Resolution

Synopsis

A path traversal vulnerability in OpenClaw before version 2026.4.25 allows an attacker with local workspace access to manipulate how the application resolves package roots during memory-core artifact loading. By corrupting or controlling workspace state, the attacker can redirect artifact loading to unintended local filesystem locations. Successful exploitation enables arbitrary code execution and access to sensitive data on the host. A patched-image rebuild at version 2026.4.25 is available on HarborGuard for environments running an affected version.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityNot required

  The attacker needs an existing shell or process on the host; no network-facing attack surface is involved.

• AuthenticationRequired

  A low-privilege local account is sufficient; the attacker must have authenticated access to the affected workspace.

• Victim interactionNot required

  No victim interaction is needed; the attacker manipulates workspace state directly without requiring another user to take any action.

• Attack complexityDetail

  Although the base exploit conditions are straightforward, the CVSS v4.0 vector notes a specific target configuration (AT:P) is required, meaning the vulnerable workspace state must already exist or be inducible by the attacker.

Blast Radius

• The attacker can load and execute arbitrary code from attacker-controlled local filesystem paths, achieving code execution within the OpenClaw process.
• The attacker can read sensitive files accessible to the OpenClaw process, including secrets, credentials, or application data stored on the host.
• The attacker can overwrite or corrupt persisted artifacts and data that OpenClaw manages, disrupting application integrity.
• Confidentiality, integrity, and availability of the local system context are all fully compromised according to the CVSS v4.0 VC:H/VI:H/VA:H ratings.