---
id: CVE-2026-100549
title: >-
  OpenClaw versions before 2026.8.1 contain a path traversal vulnerability in
  QQBot voice attachment handling where filenames are decoded twice, allowing
  encoded traversal segments to reappear after sanitization
summary: >-
  OpenClaw versions before 2026.8.1 contain a path traversal vulnerability in
  QQBot voice attachment handling where filenames are decoded twice, allowing
  encoded traversal segments to reappear after sanitization. Attackers can
  supply craft…
severity: medium
cvss: 5.4
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L'
cwe:
  - CWE-22
vendor: OpenClaw
product: OpenClaw
affected:
  - OpenClaw < 2026.8.1
published: '2026-09-26'
updated: '2026-09-29'
sourceUpdated: '2026-09-29T17:17:02.247'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-100549'
references:
  - url: >-
      https://github.com/openclaw/openclaw/security/advisories/GHSA-rm45-4jx5-2927
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-path-traversal-via-qqbot-voice-filenames
    label: disclosure@vulncheck.com
tags:
  - nvd
  - cve.org
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-09-29T17:10:42.739580Z'
epss: 0.00276
epssPercentile: 0.19887
ingestedAt: '2026-09-26T03:25:24.681Z'
---

## Overview

OpenClaw versions before 2026.8.1 contain a path traversal vulnerability in QQBot voice attachment handling where filenames are decoded twice, allowing encoded traversal segments to reappear after sanitization. Attackers can supply crafted voice attachments that write files outside the intended staging directory to other process-writable locations.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.