A vulnerability was found in OpenClaw up to 2026.3.30. It has been classified as problematic. Impacted is the function
appendLocalMediaParentRoots. The manipulation leads to incorrect permission assignment.
This vulnerability is listed as CVE-2026-41366. The attack must be carried out locally. There is no available exploit.
Upgrading the affected component is recommended.
