A critical sandbox escape vulnerability in OpenClaw allows authenticated attackers to bypass security restrictions and read arbitrary files via a race condition.

The vulnerability is a time-of-check-time-of-use (TOCTOU) race condition (CWE-367) located in the remote filesystem bridge readFile function. An authenticated attacker can exploit the gap between path validation and the file read operation to bypass sandbox restrictions and gain unauthorized access to sensitive files.

The ability to escape the sandbox and access arbitrary files on the host system presents a severe risk to data confidentiality and integrity. Given the CVSS score of 8.2, this vulnerability is classified as High and could allow an attacker to pivot from a limited application context to full system file access, potentially exposing configuration secrets, credentials, or proprietary data.

Immediate Action: Update the OpenClaw package to version 2026.3.31 or later to implement the necessary fix in the filesystem bridge.

Proactive Monitoring: Review system and application access logs for unusual patterns in filesystem interactions or repeated attempts to access restricted paths that may indicate exploitation attempts.

Compensating Controls: While no direct virtual patch is available, ensure that the application is running with the principle of least privilege by restricting the filesystem permissions of the service account to the minimum required for operation.

Public Exploit Available: No (exploit_available: unknown)

This vulnerability represents a significant security flaw that undermines the core isolation mechanisms of the OpenClaw platform. Security teams should prioritize applying the vendor-provided update to version 2026.3.31 immediately to prevent potential sandbox breakouts and unauthorized data exposure.