A vulnerability categorized as critical has been discovered in OpenClaw up to 2026.2.14. The affected element is the function apply_patch. The manipulation results in path traversal.

This vulnerability is known as CVE-2026-32060. It is possible to launch the attack remotely. No exploit is available.

It is advisable to upgrade the affected component.