[openclaw] OpenClaw has a path traversal in apply_patch could write/delete files outside the workspace

**[openclaw] OpenClaw has a path traversal in apply_patch could write/delete files outside the workspace**

Summary In affected versions, when apply_patch was enabled and the agent ran without filesystem sandbox containment, crafted paths could cause file writes/deletes outside the configured workspace directory. Affected Packages / Versions Package: openclaw (npm) Affected: <= 2026.2.13 Fixed: >= 2026.2.14 Details The non-sandbox path resolution in apply_patch did not enforce workspace containment. or absolute paths could escape the working directory in non-sandboxed mode. Impact Practical impact depends on deployment and who can trigger tool execution. This is most relevant when tool invocation is exposed to less-trusted callers or when operators expected workspace-only containment...

---

**[devsupporter 해설]**

이 기사는 GitHub Security Advisories에서 제공하는 최신 개발 동향입니다. 관련 도구나 기술에 대해 더 알아보시려면 원본 링크를 참고하세요.