CVE-2026-35632

Description

OpenClaw before 2026.3.24 contains a symlink traversal vulnerability in agents.create and agents.update handlers that use fs.appendFile on IDENTITY.md without symlink containment checks. Attackers with workspace access can plant symlinks to append attacker-controlled content to arbitrary files, enabling remote code execution via crontab injection or unauthorized access via SSH key manipulation.

Weakness classification

• disclosure@vulncheck.com: CWE-61

Primary references

• disclosure@vulncheck.com — Exploit, Vendor Advisory
• disclosure@vulncheck.com — Third Party Advisory
• 134c704f-9b21-4f2e-91b3-4a467353bcc0 — Exploit, Vendor Advisory