CVE
GHSA-9p3r-hh9g-5cmg
OpenClaw: Sandbox escape via TOCTOU race in remote FS bridge readFile
Summary
Sandbox escape via TOCTOU race in remote FS bridge readFile
Current Maintainer Triage
- Normalized severity: critical
- Assessment: v2026.3.28 remote sandbox reads still do path-check then separate file read, so the TOCTOU sandbox escape remains present in the latest shipped tag.
Affected Packages / Versions
- Package:
openclaw(npm) - Latest published npm version:
2026.3.31 - Vulnerable version range:
<=2026.3.28 - Patched versions:
>= 2026.3.31 - First stable tag containing the fix:
v2026.3.31
Fix Commit(s)
121870a08583033ed6a0ed73d9ffea32991252bb— 2026-03-31T09:55:51+09:00
OpenClaw thanks @AntAISecurityLab for reporting.
Package Versions Affected
Package Version
patch Availability
No items found.
Automatically patch vulnerabilities without upgrading
Fix Without Upgrading
Detect compatible fix
Apply safe remediation
Fix with a single pull request
CVSS Version
Severity
Base Score
CVSS Version
Score Vector
C
H
U
-
C
H
U
0
-
C
H
U
-
Related Resources
No items found.
References
https://github.com/openclaw/openclaw/security/advisories/GHSA-9p3r-hh9g-5cmg, https://github.com/openclaw/openclaw/commit/121870a08583033ed6a0ed73d9ffea32991252bb, https://github.com/openclaw/openclaw, https://github.com/openclaw/openclaw/releases/tag/v2026.3.31
Basic Information
Ecosystem
