9.6 CriticalCWE-367
CVE-2026-44112
OpenClaw vulnerability
Status
- Not in CISA KEV
- Fixed in version 2026.4.22
Exploit probabilityEPSSchecked 24 Oct
0.4%probability of exploitation in the next 30 days
Higher than 32% of scored CVEs
SeverityCVSS
9.6Critical
Description NVD
OpenClaw before 2026.4.22 contains a time-of-check/time-of-use race condition in OpenShell sandbox filesystem writes that allows attackers to redirect writes outside the intended mount root. Attackers can exploit symlink swaps during filesystem operations to bypass sandbox restrictions and write files outside the local mount root.
Coverage 3 articles · 3 outlets
See the full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Fri 15 May · 16:10 UTC | The Hacker News | OpenClaw chain lets attackers hijack config and steal data |
| Mon 18 May · 12:41 UTC | SecurityWeek | ‘Claw Chain’ OpenClaw Flaws Allow Sandbox Escape, Backdoor Delivery |
| Mon 18 May · 22:11 UTC | Dark Reading | OpenClaw bugs enable full system takeover via chained exploits |
- OpenClaw bugs enable full system takeover via chained exploitsDark Reading
- ‘Claw Chain’ OpenClaw Flaws Allow Sandbox Escape, Backdoor DeliverySecurityWeek · mentions it in passing
- OpenClaw chain lets attackers hijack config and steal dataThe Hacker News · first in our coverage