CVE-2026-43533: OpenClaw QQBot Arbitrary File Read Vulnerability Uncovered

The National Vulnerability Database has identified CVE-2026-43533, a critical arbitrary file read vulnerability within OpenClaw’s QQBot media tag functionality. Versions prior to 2026.4.10 are affected. Attackers can exploit this by crafting malicious reply text containing specific media tags, allowing them to reference host-local paths that fall outside the intended media storage boundaries. This mechanism enables the disclosure of arbitrary local files through the QQBot’s outbound media handling.

This vulnerability, rated HIGH with a CVSS score of 8.6, presents a significant risk. Attackers can leverage it without any privileges or user interaction, and the scope is broadened, meaning it impacts more than just the vulnerable component. The ability to read any local file on the host system can lead to severe information disclosure, potentially revealing sensitive configuration data, credentials, or proprietary information.

Defenders should prioritize patching OpenClaw installations to version 2026.4.10 or later immediately. For systems that cannot be patched promptly, consider implementing strict input validation on user-supplied text for QQBot media tags and monitor outbound network traffic for suspicious file access patterns originating from the media handling service. Understanding the attacker’s calculus here is simple: gain access to sensitive data with minimal effort.