CyberRota Analysis
AI-GeneratedOpenClaw versions prior to 2026.6.9 are vulnerable to a symlink following issue in the mirror sync feature, which allows lower-trust users to execute actions that require higher authorization levels. This vulnerability can be exploited by attackers to bypass critical policy checks and authorization boundaries, potentially compromising system integrity. Organizations using affected versions should prioritize patching to mitigate the risk of unauthorized access and exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
OpenClaw versions before 2026.6.9 contain a symlink following vulnerability in the mirror sync feature that allows lower-trust callers to perform actions requiring stronger authorization. Attackers can exploit remote symlink parents to bypass policy checks and authorization boundaries when the feature is enabled and reachable.
Related CVEs
Other vulnerabilities affecting the same vendor(s)