CVE-2026-44113

HIGH

OpenClaw < 2026.4.22 - Time-of-Check/Time-of-Use Race Condition in OpenShell FS Bridge

Title source: cna
STIX 2.1

Description

OpenClaw before 2026.4.22 contains a time-of-check/time-of-use race condition in the OpenShell filesystem bridge that allows attackers to read files outside the intended mount root. Attackers can exploit symlink swaps during filesystem operations to bypass sandbox restrictions and access unauthorized file contents.

References (3)

Core 3
Core References
Vendor Advisory vendor-advisory
GitHub Security Advisory (GHSA-5h3g-6xhh-rg6p)
https://github.com/openclaw/openclaw/security/advisories/GHSA-5h3g-6xhh-rg6p
Third Party Advisory third-party-advisory
VulnCheck Advisory: OpenClaw < 2026.4.22 - Time-of-Check/Time-of-Use Race Condition in OpenShell FS Bridge
https://www.vulncheck.com/advisories/openclaw-time-of-check-time-of-use-race-condition-in-openshell-fs-bridge

Scores

CVSS v3 7.7
EPSS 0.0003
EPSS Percentile 9.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-367
Status published
Products (4)
npm/openclaw 0 - 2026.4.22npm
OpenClaw/OpenClaw < 2026.4.22
openclaw/openclaw < 2026.4.22
OpenClaw/OpenClaw 2026.4.22
Published May 06, 2026
Tracked Since May 07, 2026