A vulnerability categorized as critical has been discovered in OpenClaw up to 2026.2.14. The affected element is the function
apply_patch. The manipulation results in path traversal.
This vulnerability is known as CVE-2026-32060. It is possible to launch the attack remotely. No exploit is available.
It is advisable to upgrade the affected component.