Vulnerabilities
Report: CVE-2026-44112 - OpenClaw Symlink Swap Time-of-Check/Time-of-Use Race Condition (TOCTOU) Vulnerab
CVE ID :CVE-2026-44112 Published : May 6, 2026, 8:16 p.m. | 22 minutes ago Description :OpenClaw before 2026.4.22 contains a time-of-check/time-of-use race condition in OpenShell sandbox filesystem writes that allows attackers to redirect writes outside the intended mount root. Attackers can exploit symlink swaps during filesystem operations to bypass sandbox restrictions and write files outside the local mount root. Severity: 6.0 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...