Issue Station
Sign In
Tools hereToolbox

openclaw - 💡(How to fix) Fix [Bug]: [Bug]: Signal inbound media path rejected by image tool allowed-root check on 2026.4.21 [2 comments, 3 participants]

Official PRs (…)
ON THIS PAGE

Recommended Tools

×6

Utilities matched from this issue’s tags and category — try them while you read without losing context.

GitHub issue graph ai analysis

Paste a GitHub issue URL. We fetch that issue, discover linked issues from bodies/comments/timeline, collect linked pull requests, and produce a structured English report.

The report is written in English Markdown for sharing and archival.

Helpful · Quick feedback

Loading…
GitHub stats
openclaw/openclaw#70277•Fetched 2026-04-23 07:26:51
View on GitHub
Comments
2
Participants
3
Timeline
6
Reactions
0
Author
MP225MP225
Participants
MP225MP225rafiki270rafiki270steipetesteipete
Timeline (top)
commented ×2labeled ×2closed ×1cross-referenced ×1

After auth fix in 2026.4.21, Signal inbound images stored in ~/.openclaw/media/inbound/ are still rejected by the image tool with "Local media path is not under an allowed directory".

Root Cause

After auth fix in 2026.4.21, Signal inbound images stored in ~/.openclaw/media/inbound/ are still rejected by the image tool with "Local media path is not under an allowed directory".

Fix Action

Fix / Workaround

  1. Configure tools.media.image.models with anthropic/claude-haiku-4-5
  2. Send an image via Signal
  3. Image is stored at ~/.openclaw/media/inbound/<uuid>.jpg
  4. Image tool rejects path: "not under an allowed directory"
  5. Workaround: copy image to workspace/temp/ — works from there

Affected: All Signal users using image analysis Severity: Blocks all automatic inbound image processing Frequency: Always (100% reproducible) Workaround: Copy image to workspace/temp/ first

RAW_BUFFERClick to expand / collapse

Bug type

Behavior bug (incorrect output/state without crash)

Beta release blocker

No

Summary

After auth fix in 2026.4.21, Signal inbound images stored in ~/.openclaw/media/inbound/ are still rejected by the image tool with "Local media path is not under an allowed directory".

Steps to reproduce

  1. Configure tools.media.image.models with anthropic/claude-haiku-4-5
  2. Send an image via Signal
  3. Image is stored at ~/.openclaw/media/inbound/<uuid>.jpg
  4. Image tool rejects path: "not under an allowed directory"
  5. Workaround: copy image to workspace/temp/ — works from there

Expected behavior

~/.openclaw/media/inbound/ should be an allowed root (it's an OpenClaw-managed directory under stateDir)

Actual behavior

Path rejected, image cannot be analyzed.

OpenClaw version

OpenClaw 2026.4.21

Operating system

Ubuntu 24.04

Install method

npm global

Model

anthropic/claude-haiku-4-5

Provider / routing chain

openclaw → anthropic

Additional provider/model setup details

Primary model: ollama/glm-5:cloud (no vision capability) Fallbacks: ollama/kimi-k2:1t-cloud, anthropic/claude-haiku-4-5 imageModel not used — configured via tools.media.image.models instead tools.media.image.models: [{ provider: "anthropic", model: "claude-haiku-4-5", profile: "anthropic:default" }] Auth via SecretRef: auth-profiles.json keyRef → env:ANTHROPIC_API_KEY tools.fs.workspaceOnly: false Signal channel — inbound images stored at ~/.openclaw/media/inbound/<uuid>.jpg

Logs, screenshots, and evidence

Impact and severity

Affected: All Signal users using image analysis Severity: Blocks all automatic inbound image processing Frequency: Always (100% reproducible) Workaround: Copy image to workspace/temp/ first

Additional information

Auth bug (401) was fixed in 2026.4.21 This is the remaining separate path-root bug. Related: #69620 (auth bug, now fixed) Verified: HOME and ANTHROPIC_API_KEY correct in daemon env. stateDir correctly resolves to ~/.openclaw/

extent analysis

TL;DR

Update the allowed directories configuration to include ~/.openclaw/media/inbound/ to fix the image tool rejection issue.

Guidance

  • Verify that the tools.media.image.models configuration is correctly set up to use the anthropic/claude-haiku-4-5 model.
  • Check the stateDir configuration to ensure it resolves to ~/.openclaw/ and that the inbound directory is a subdirectory of stateDir.
  • Update the allowed directories configuration to include ~/.openclaw/media/inbound/ to allow the image tool to access images stored in this directory.
  • Test the image analysis workflow again after updating the configuration to ensure the issue is resolved.

Example

No code snippet is provided as the issue does not require a code change, but rather a configuration update.

Notes

The issue is specific to the openclaw version 2026.4.21 and the anthropic/claude-haiku-4-5 model. The workaround of copying images to workspace/temp/ suggests that the issue is related to the allowed directories configuration.

Recommendation

Apply the workaround by updating the allowed directories configuration to include ~/.openclaw/media/inbound/, as this is a more targeted solution than upgrading to a potentially unavailable fixed version.

Vote matrix · Quick signals

Works
Did the solution work? Tap to confirm.
Easy Fix
Was it a quick fix?
Time Saver
Did it save you time?
Blocking
Was it severely blocking?
Common Issue
Are others likely hitting this too?
Flaky / Intermittent
Is it intermittent?
Verified / Reproducible
Can you reproduce it reliably?
Loading…

FAQ

Expected behavior

~/.openclaw/media/inbound/ should be an allowed root (it's an OpenClaw-managed directory under stateDir)

#api#vector store#embedding generation#cache error#pipeline error

Still need to ship something?

×6

Another batch ranked right after the header list — different links, same matching logic.

Back to top recommendations

TRENDING

openclaw - 💡(How to fix) Fix [Bug]: [Bug]: Signal inbound media path rejected by image tool allowed-root check on 2026.4.21 [2 comments, 3 participants]