A sandbox boundary bypass vulnerability in OpenClaw allows a local, authenticated attacker to perform unauthorized file operations, potentially leading to system compromise.

This is a Time-of-check Time-of-use (TOCTOU) race condition (CWE-367) within the fs-bridge component. The vulnerability allows an attacker with low privileges to bypass sandbox restrictions by exploiting the gap between file creation and the final guarded replace step.

The ability to write arbitrary files outside of a sandbox environment poses a significant risk to system integrity and security boundaries. While the CVSS score of 7.5 indicates a high severity, the requirement for local access and specific race condition timing limits the immediate exposure to internal actors or environments where local execution is possible. Successful exploitation could lead to privilege escalation or the persistence of malicious code within the host system.

Immediate Action: Update the OpenClaw package to version 2026.3.11 or later to implement proper path validation during temporary file creation.

Proactive Monitoring: Monitor system logs for unexpected file system activity or errors generated by the fs-bridge component, particularly those involving rapid file path changes.

Compensating Controls: Ensure that the application is running with the minimum necessary filesystem permissions to limit the scope of potential unauthorized writes if the sandbox is breached.

Public Exploit Available: No.

Given the potential for sandbox escape and subsequent system-level impact, organizations should prioritize updating to version 2026.3.11 during the next maintenance cycle. Although the exploit requires local access and complex timing, patching remains the only definitive way to eliminate the underlying race condition flaw.