OpenClaw Sandbox Escape Via Time-of-Check-Time-of-Use Race Condition

The National Vulnerability Database has detailed CVE-2026-41296, a high-severity vulnerability (CVSS 8.2) in OpenClaw versions prior to 2026.3.31. This flaw is a classic time-of-check-time-of-use (TOCTOU) race condition within the remote filesystem bridge’s readFile function, allowing for a sandbox escape.

Attackers can exploit the distinct path validation and file read operations. By manipulating the file system between these two operations, they can bypass intended sandbox restrictions and gain the ability to read arbitrary files on the compromised system. While specific affected products are not detailed, any environment utilizing vulnerable OpenClaw versions is at risk.

This isn’t theoretical. A TOCTOU bug like this is a golden ticket for a sandbox escape, turning a limited compromise into potential full system access. Defenders need to understand the attacker’s calculus here: they’re looking for any opportunity to elevate privileges and move laterally. This vulnerability provides that exact opening, making it critical to address.