CVE-2026-4040

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-4040", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "PUBLISHED", "assignerShortName": "VulDB", "dateReserved": "2026-03-12T06:46:15.510Z", "datePublished": "2026-03-12T12:02:14.140Z", "dateUpdated": "2026-03-12T13:08:57.088Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-03-12T12:02:14.140Z"}, "title": "OpenClaw File Existence tools.exec.safeBins information exposure", "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-203", "lang": "en", "description": "Information Exposure Through Discrepancy"}]}, {"descriptions": [{"type": "CWE", "cweId": "CWE-200", "lang": "en", "description": "Information Disclosure"}]}], "affected": [{"vendor": "n/a", "product": "OpenClaw", "versions": [{"version": "2026.2.0", "status": "affected"}, {"version": "2026.2.1", "status": "affected"}, {"version": "2026.2.2", "status": "affected"}, {"version": "2026.2.3", "status": "affected"}, {"version": "2026.2.4", "status": "affected"}, {"version": "2026.2.5", "status": "affected"}, {"version": "2026.2.6", "status": "affected"}, {"version": "2026.2.7", "status": "affected"}, {"version": "2026.2.8", "status": "affected"}, {"version": "2026.2.9", "status": "affected"}, {"version": "2026.2.10", "status": "affected"}, {"version": "2026.2.11", "status": "affected"}, {"version": "2026.2.12", "status": "affected"}, {"version": "2026.2.13", "status": "affected"}, {"version": "2026.2.14", "status": "affected"}, {"version": "2026.2.15", "status": "affected"}, {"version": "2026.2.16", "status": "affected"}, {"version": "2026.2.17", "status": "affected"}, {"version": "2026.2.19-beta.1", "status": "unaffected"}], "cpes": ["cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:*"], "modules": ["File Existence Handler"]}], "descriptions": [{"lang": "en", "value": "A vulnerability was identified in OpenClaw up to 2026.2.17. This issue affects the function tools.exec.safeBins of the component File Existence Handler. The manipulation leads to information exposure through discrepancy. The attack needs to be performed locally. Upgrading to version 2026.2.19-beta.1 is capable of addressing this issue. The identifier of the patch is bafdbb6f112409a65decd3d4e7350fbd637c7754. Upgrading the affected component is advised."}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 4.8, "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X", "baseSeverity": "MEDIUM"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 3.3, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:X/RL:O/RC:C", "baseSeverity": "LOW"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 3.3, "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:X/RL:O/RC:C", "baseSeverity": "LOW"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 1.7, "vectorString": "AV:L/AC:L/Au:S/C:P/I:N/A:N/E:ND/RL:OF/RC:C"}}], "timeline": [{"time": "2026-03-12T00:00:00.000Z", "lang": "en", "value": "Advisory disclosed"}, {"time": "2026-03-12T01:00:00.000Z", "lang": "en", "value": "VulDB entry created"}, {"time": "2026-03-12T07:51:24.000Z", "lang": "en", "value": "VulDB entry last update"}], "credits": [{"lang": "en", "value": "nedlir (VulDB User)", "type": "reporter"}], "references": [{"url": "https://vuldb.com/?id.350652", "name": "VDB-350652 | OpenClaw File Existence tools.exec.safeBins information exposure", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/?ctiid.350652", "name": "VDB-350652 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/?submit.769581", "name": "Submit #769581 | openclaw 2026.2.17 Information Disclosure", "tags": ["third-party-advisory"]}, {"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-6c9j-x93c-rw6j", "tags": ["related"]}, {"url": "https://github.com/openclaw/openclaw/commit/bafdbb6f112409a65decd3d4e7350fbd637c7754", "tags": ["patch"]}, {"url": "https://github.com/openclaw/openclaw/releases/tag/v2026.2.19-beta.1", "tags": ["patch"]}, {"url": "https://github.com/openclaw/openclaw/", "tags": ["product"]}], "tags": ["x_open-source"]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-03-12T13:08:04.596893Z", "id": "CVE-2026-4040", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-12T13:08:57.088Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-4040", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-03-12T13:08:04.596893Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-12T13:08:10.108Z"}}], "cna": {"tags": ["x_open-source"], "title": "OpenClaw File Existence tools.exec.safeBins information exposure", "credits": [{"lang": "en", "type": "reporter", "value": "nedlir (VulDB User)"}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 4.8, "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:X/RL:O/RC:C"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:X/RL:O/RC:C"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 1.7, "vectorString": "AV:L/AC:L/Au:S/C:P/I:N/A:N/E:ND/RL:OF/RC:C"}}], "affected": [{"cpes": ["cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:*"], "vendor": "n/a", "modules": ["File Existence Handler"], "product": "OpenClaw", "versions": [{"status": "affected", "version": "2026.2.0"}, {"status": "affected", "version": "2026.2.1"}, {"status": "affected", "version": "2026.2.2"}, {"status": "affected", "version": "2026.2.3"}, {"status": "affected", "version": "2026.2.4"}, {"status": "affected", "version": "2026.2.5"}, {"status": "affected", "version": "2026.2.6"}, {"status": "affected", "version": "2026.2.7"}, {"status": "affected", "version": "2026.2.8"}, {"status": "affected", "version": "2026.2.9"}, {"status": "affected", "version": "2026.2.10"}, {"status": "affected", "version": "2026.2.11"}, {"status": "affected", "version": "2026.2.12"}, {"status": "affected", "version": "2026.2.13"}, {"status": "affected", "version": "2026.2.14"}, {"status": "affected", "version": "2026.2.15"}, {"status": "affected", "version": "2026.2.16"}, {"status": "affected", "version": "2026.2.17"}, {"status": "unaffected", "version": "2026.2.19-beta.1"}]}], "timeline": [{"lang": "en", "time": "2026-03-12T00:00:00.000Z", "value": "Advisory disclosed"}, {"lang": "en", "time": "2026-03-12T01:00:00.000Z", "value": "VulDB entry created"}, {"lang": "en", "time": "2026-03-12T07:51:24.000Z", "value": "VulDB entry last update"}], "references": [{"url": "https://vuldb.com/?id.350652", "name": "VDB-350652 | OpenClaw File Existence tools.exec.safeBins information exposure", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/?ctiid.350652", "name": "VDB-350652 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/?submit.769581", "name": "Submit #769581 | openclaw 2026.2.17 Information Disclosure", "tags": ["third-party-advisory"]}, {"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-6c9j-x93c-rw6j", "tags": ["related"]}, {"url": "https://github.com/openclaw/openclaw/commit/bafdbb6f112409a65decd3d4e7350fbd637c7754", "tags": ["patch"]}, {"url": "https://github.com/openclaw/openclaw/releases/tag/v2026.2.19-beta.1", "tags": ["patch"]}, {"url": "https://github.com/openclaw/openclaw/", "tags": ["product"]}], "descriptions": [{"lang": "en", "value": "A vulnerability was identified in OpenClaw up to 2026.2.17. This issue affects the function tools.exec.safeBins of the component File Existence Handler. The manipulation leads to information exposure through discrepancy. The attack needs to be performed locally. Upgrading to version 2026.2.19-beta.1 is capable of addressing this issue. The identifier of the patch is bafdbb6f112409a65decd3d4e7350fbd637c7754. Upgrading the affected component is advised."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-203", "description": "Information Exposure Through Discrepancy"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-200", "description": "Information Disclosure"}]}], "providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-03-12T12:02:14.140Z"}}}, "cveMetadata": {"cveId": "CVE-2026-4040", "state": "PUBLISHED", "dateUpdated": "2026-03-12T13:08:57.088Z", "dateReserved": "2026-03-12T06:46:15.510Z", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "datePublished": "2026-03-12T12:02:14.140Z", "assignerShortName": "VulDB"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:*"], "modules": ["File Existence Handler"], "product": "OpenClaw", "vendor": "n/a", "versions": [{"status": "affected", "version": "2026.2.0"}, {"status": "affected", "version": "2026.2.1"}, {"status": "affected", "version": "2026.2.2"}, {"status": "affected", "version": "2026.2.3"}, {"status": "affected", "version": "2026.2.4"}, {"status": "affected", "version": "2026.2.5"}, {"status": "affected", "version": "2026.2.6"}, {"status": "affected", "version": "2026.2.7"}, {"status": "affected", "version": "2026.2.8"}, {"status": "affected", "version": "2026.2.9"}, {"status": "affected", "version": "2026.2.10"}, {"status": "affected", "version": "2026.2.11"}, {"status": "affected", "version": "2026.2.12"}, {"status": "affected", "version": "2026.2.13"}, {"status": "affected", "version": "2026.2.14"}, {"status": "affected", "version": "2026.2.15"}, {"status": "affected", "version": "2026.2.16"}, {"status": "affected", "version": "2026.2.17"}, {"status": "unaffected", "version": "2026.2.19-beta.1"}]}], "source": "cna@vuldb.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*", "matchCriteriaId": "8CC6E93F-D95F-4CE4-962A-B656C4EF8956", "versionEndExcluding": "2026.2.19", "versionStartIncluding": "2026.2.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability was identified in OpenClaw up to 2026.2.17. This issue affects the function tools.exec.safeBins of the component File Existence Handler. The manipulation leads to information exposure through discrepancy. The attack needs to be performed locally. Upgrading to version 2026.2.19-beta.1 is capable of addressing this issue. The identifier of the patch is bafdbb6f112409a65decd3d4e7350fbd637c7754. Upgrading the affected component is advised."}, {"lang": "es", "value": "Una vulnerabilidad fue identificada en OpenClaw hasta 2026.2.17. Este problema afecta la funci\u00f3n tools.exec.safeBins del componente Gestor de Existencia de Archivos. La manipulaci\u00f3n conduce a la exposici\u00f3n de informaci\u00f3n a trav\u00e9s de discrepancia. El ataque necesita ser realizado localmente. La actualizaci\u00f3n a la versi\u00f3n 2026.2.19-beta.1 es capaz de abordar este problema. El identificador del parche es bafdbb6f112409a65decd3d4e7350fbd637c7754. Se aconseja actualizar el componente afectado."}], "id": "CVE-2026-4040", "lastModified": "2026-06-17T10:55:53.283", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 1.7, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:L/AC:L/Au:S/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 3.1, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "cna@vuldb.com", "type": "Secondary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 3.3, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 1.4, "source": "cna@vuldb.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "LOCAL", "availabilityRequirement": "NOT_DEFINED", "baseScore": 4.8, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "cna@vuldb.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-4040", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-03-12T13:08:04.596893Z", "version": "2.0.3"}}]}, "published": "2026-03-12T12:15:59.990", "references": [{"source": "cna@vuldb.com", "tags": ["Product"], "url": "https://github.com/openclaw/openclaw/"}, {"source": "cna@vuldb.com", "tags": ["Patch"], "url": "https://github.com/openclaw/openclaw/commit/bafdbb6f112409a65decd3d4e7350fbd637c7754"}, {"source": "cna@vuldb.com", "tags": ["Release Notes"], "url": "https://github.com/openclaw/openclaw/releases/tag/v2026.2.19-beta.1"}, {"source": "cna@vuldb.com", "tags": ["Vendor Advisory"], "url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-6c9j-x93c-rw6j"}, {"source": "cna@vuldb.com", "tags": ["Permissions Required", "VDB Entry"], "url": "https://vuldb.com/?ctiid.350652"}, {"source": "cna@vuldb.com", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://vuldb.com/?id.350652"}, {"source": "cna@vuldb.com", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://vuldb.com/?submit.769581"}], "sourceIdentifier": "cna@vuldb.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-200"}, {"lang": "en", "value": "CWE-203"}], "source": "cna@vuldb.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[2026.2.0,2026.2.17]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "2026.2.19-beta.1"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "OpenClaw", "source": "cna", "vendor": "n/a"}, "product": "openclaw", "vendor": "openclaw"}], "analysis": {"en": {"generated_at": "2026-03-17T17:01:10.103411+00:00", "value": {"mitigation_remediation": ["Apply the official patch by upgrading OpenClaw to version 2026.2.19-beta.1 (commit bafdbb6f112409a65decd3d4e7350fbd637c7754)", "Verify the upgrade has been applied by checking the release notes or commit hash"], "summary": {"action": "Patch", "impact": "Information Disclosure"}, "threat_synthesis": {"affected_systems": "OpenClaw applications running any version up to and including 2026.2.17 are affected. The vulnerability is present in all builds of OpenClaw that include the File Existence Handler component, regardless of the underlying operating system or Node.js runtime as indicated by the CPE entries.", "description_and_impact": "The vulnerability resides in the tools.exec.safeBins function of the File Existence Handler component in OpenClaw. By manipulating the input, an attacker can cause the component to expose sensitive file existence information. This leads to information disclosure because an attacker may infer the presence or absence of protected files. The weakness is classified as CWE-200 and CWE-203, indicating an information exposure due to improper handling of file paths and discrepancy-based leakage.", "risk_and_exploitability": "The CVSS score is 4.8, reflecting a moderate severity. The EPSS score is less than 1%, meaning exploitation is expected to be rare. The vulnerability is not listed in CISA's Known Exploited Vulnerabilities catalog, further reducing its public exploit likelihood. Exploitation requires local access to the system, so an attacker must already have some level of entry. Given the local scope and low exploit probability, the overall risk is low but not negligible for systems that handle confidential data."}}}}, "created": "2026-03-13T09:53:14.476328+00:00", "updated": "2026-03-20T15:49:51.646121+00:00", "vendors": ["openclaw", "openclaw$PRODUCT$openclaw"]}