Skip to content

OpenClaw: stageSandboxMedia destination symlink traversal can overwrite files outside sandbox workspace

High severity GitHub Reviewed Published Mar 3, 2026 in openclaw/openclaw • Updated Mar 19, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts