GHSA-6C9J-X93C-RW6J: OpenClaw Side-Channel: The `safeBins` File Existence Oracle

OpenClaw Side-Channel: The safeBins File Existence Oracle Vulnerability ID: GHSA-6C9J-X93C-RW6J CVSS Score: 4.3 Published: 2026-02-19 A logic flaw in the OpenClaw AI agent framework's command validation layer created a boolean side-channel, allowing attackers to probe the host filesystem. By attempting to prevent agents from accessing sensitive files via 'safe' binaries, the validation logic inadvertently revealed the existence of those files through error message discrepancies. TL;DR OpenClaw tried to stop AI agents from reading sensitive files by checking if files existed before running commands. Ironically, this check created a side-channel: if the system blocked the command, the attacker knew the file existed. If it didn't, the file was missing. ⚠️ Exploit Status: POC Technical Details CWE ID : CWE-203 Attack Vector : Network (Agent Session) CVSS : 4.3 (Medium) Risk : Filesystem Enumeration Impact : Information Disclosure Exploit Status : PoC Available Affected Systems OpenClaw Fra