[openclaw] OpenClaw: Message action attachment hydration bypasses local media root checks when sandboxRoot is unset

**[openclaw] OpenClaw: Message action attachment hydration bypasses local media root checks when sandboxRoot is unset**

Impact sendAttachment and setGroupIcon message actions could hydrate media from local absolute paths when sandboxRoot was unset, bypassing intended local media root checks. This could allow reads of arbitrary host files reachable by the runtime user when an authorized message-action path was triggered. Affected Packages / Versions Package: openclaw (npm) Latest published npm version at triage: 2026.2.23 Vulnerable: <= 2026.2.23 Patched in code: >= 2026.2.24 (planned next release) Remediation Upgrade to openclaw 2026.2.24 or later once published. Fix Commit(s) 270ab03e379f9653e15f7033c9830399b66b7e51 Release Process Note patched_versions is pre-set to the planned next release (>= 2026.2.24). Once that npm release is published, this advisory can be published without further field edits...

---

**[devsupporter 해설]**

이 기사는 GitHub Security Advisories에서 제공하는 최신 개발 동향입니다. 관련 도구나 기술에 대해 더 알아보시려면 원본 링크를 참고하세요.