CVE-2026-4040— OpenClaw File Existence tools.exec.safeBins information exposure
Quick assessment
Affected
n/a OpenClaw
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
OpenClaw是openclaw开源的一个智能人工助理。 OpenClaw 2026.2.17及之前版本存在安全漏洞，该漏洞源于组件File Existence Handler的函数tools.exec.safeBins存在信息泄露。
Possible ATT&CK Techniques 1 AI
T1083 · File and Directory Discovery
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-4040
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
OpenClaw File Existence tools.exec.safeBins information exposure
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability was identified in OpenClaw up to 2026.2.17. This issue affects the function tools.exec.safeBins of the component File Existence Handler. The manipulation leads to information exposure through discrepancy. The attack needs to be performed locally. Upgrading to version 2026.2.19-beta.1 is capable of addressing this issue. The identifier of the patch is bafdbb6f112409a65decd3d4e7350fbd637c7754. Upgrading the affected component is advised.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
通过差异性导致的信息暴露
Source: CVE Program / CVE List V5
Vulnerability Title
OpenClaw 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
OpenClaw是openclaw开源的一个智能人工助理。 OpenClaw 2026.2.17及之前版本存在安全漏洞，该漏洞源于组件File Existence Handler的函数tools.exec.safeBins存在信息泄露。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | OpenClaw | 2026.2.0 |
cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:*
|
|
II. Public POCs for CVE-2026-4040
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-4040
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-4040 (1)
Vendor Advisories for CVE-2026-4040 (3)
-
Submit #769581: openclaw 2026.2.17 Information Disclosure third-party-advisory
-
CVE-2026-4040 OpenClaw File Existence tools.exec.safeBins information exposure (GHSA-6c9j-x93c-rw6j) vdb-entry technical-description
Vendor Pages for CVE-2026-4040 (1)
Other References for CVE-2026-4040 (1)
Same Patch Batch · n/a · 2026-03-12 · 20 CVEs total
| CVE-2026-4039 | 6.3 MEDIUM | OpenClaw Skill Env applySkillConfigenvOverrides code injection |
| CVE-2026-3977 | 6.3 MEDIUM | projectsend AJAX Endpoints authorization |
| CVE-2026-4016 | 5.3 MEDIUM | GPAC SVG Parser load_svg.c svgin_process out-of-bounds write |
| CVE-2026-4015 | 5.3 MEDIUM | GPAC TeXML File load_text.c txtin_process_texml stack-based overflow |
| CVE-2026-4044 | 3.8 LOW | projectsend Delete import-orphans.php realpath path traversal |
| CVE-2026-4045 | 3.7 LOW | projectsend Auth.php response discrepancy |
| CVE-2026-25817 | HMS Ewon Flexy和HMS Networks HMS Cosy+ 安全漏洞 | |
| CVE-2026-25823 | HMS Ewon Flexy和HMS Networks HMS Cosy+ 安全漏洞 | |
| CVE-2026-25818 | HMS Cosy+和HMS Ewon Flexy 安全漏洞 | |
| CVE-2026-25819 | HMS Cosy+和HMS Ewon Flexy 安全漏洞 | |
| CVE-2025-61154 | libredwg 安全漏洞 | |
| CVE-2025-70245 | D-Link DIR-513 安全漏洞 | |
| CVE-2025-70873 | SQLite 安全漏洞 | |
| CVE-2025-66955 | Asseco SEE Live 安全漏洞 | |
| CVE-2026-26793 | GL-iNet GL-AR300M16 安全漏洞 | |
| CVE-2026-26792 | GL-iNet GL-AR300M16 安全漏洞 | |
| CVE-2026-26794 | GL-iNet GL-AR300M16 安全漏洞 | |
| CVE-2026-26795 | GL-iNet GL-AR300M16 安全漏洞 | |
| CVE-2026-26791 | GL-iNet GL-AR300M16 安全漏洞 |
IV. Related Vulnerabilities
Same product: OpenClaw
-
CVE-2026-102807
OpenClaw before 2026.9.4 Authorization Bypass via MCP App St -
CVE-2026-102806
OpenClaw before 2026.9.5 Sandbox Isolation Bypass via Media -
CVE-2026-100599
OpenClaw 2026.5.1 before 2026.7.1 Remote Code Execution via -
CVE-2026-100598
OpenClaw before 2026.7.1 Approval Binding Logic Error -
CVE-2026-100597
OpenClaw before 2026.7.1 Path Traversal via Filesystem Race
Same vendor: n/a
-
CVE-2026-103484
pgvector buffer overflow in IVFFlat index build -
CVE-2026-103531
OpenSC card-setcos.c setcos_construct_fci_44 stack-based ove -
CVE-2026-103227
GPAC DASH Client dash_client.c gf_dash_resolve_url buffer ov -
CVE-2026-103118
GraphicsMagick WPG File wpg.c ExtractPostscript recursion -
CVE-2026-51870
DeepTutor v1.4.0 命令执行漏洞
Same weakness: CWE-203
-
CVE-2026-56098
Rubygem-katello: improper authorization logic allows resourc -
CVE-2026-103275
Ghost 5.42.2 before 6.58.0 Password Hash Disclosure -
CVE-2026-103272
Ghost 2.10.0 before 6.63.0 Staff Enumeration via Content API -
CVE-2026-84461
Zammad: Missing rate limiting allows password brute-forcing -
CVE-2026-91714
Google Chrome 侧信道信息泄露漏洞
V. Comments for CVE-2026-4040
No comments yet