OpenClaw versions before 2026.4.10 contain an arbitrary file read vulnerability in QQBot media tags. Attackers can exploit this flaw by crafting malicious reply text containing media tags that reference host-local paths outside the intended media storage boundary. This allows unauthorized disclosure of arbitrary local files through outbound media handling. The vulnerability enables path traversal attacks that can expose sensitive system files to remote attackers. The issue has been addressed in version 2026.4.10 and earlier versions should be updated immediately.