A symlink following vulnerability in the OpenClaw SSH sandbox allows authenticated attackers to perform arbitrary file writes, potentially leading to unauthorized system modification.

This vulnerability, classified as CWE-59, involves improper link resolution during the processing of uploaded tar archives. An authenticated remote attacker can include symlinks within a malicious archive to escape the intended sandbox and overwrite critical files on the underlying host.

The ability to overwrite arbitrary files on a host system presents a severe risk to data integrity and system availability. Successful exploitation could allow an attacker to modify configuration files, overwrite binary executables, or inject malicious scripts, effectively compromising the affected server. Given the CVSS score of 8.1, this vulnerability is considered high severity, as it facilitates significant impact on system integrity and availability.

Immediate Action: Update the OpenClaw package to version 2026.3.31 or later to implement the necessary security checks for symlink resolution during file extraction.

Proactive Monitoring: Review system access logs for anomalous file write activity or unexpected processes triggered by user-uploaded archives.

Compensating Controls: Restrict SSH access to the sandbox environment to trusted users only and implement strict filesystem permissions to prevent the application process from modifying sensitive system directories.

Public Exploit Available: Unknown

Organizations utilizing OpenClaw must prioritize the upgrade to version 2026.3.31 immediately. Failure to address this vulnerability allows authenticated users the capability to perform unauthorized file operations, which could serve as a precursor to a broader system compromise. Ensure that all deployment pipelines are updated to reference the patched version to maintain a secure posture.