https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-01T13:35:59.649979+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-44113 CVE-2026-44113 — OpenClaw < 2026.4.22 - Time-of-Check/Time-of-Use Race Condition in OpenShell FS Bridge 2026-10-01T13:35:59.652737+00:00

Affected: OpenClaw

OpenClaw before 2026.4.22 contains a time-of-check/time-of-use race condition in the OpenShell filesystem bridge that allows attackers to read files outside the intended mount root. Attackers can exploit symlink swaps during filesystem operations to bypass sandbox restrictions and access unauthorized file contents.

 https://db.gcve.eu/vuln/ghsa-5h3g-6xhh-rg6p GHSA-5h3g-6xhh-rg6p — OpenClaw: OpenShell FS bridge reads pin and verify the opened file before returning bytes 2026-10-01T13:35:59.652857+00:00

Affected: npm: openclaw

## Summary OpenShell FS bridge reads pin and verify the opened file before returning bytes

## Affected Packages / Versions - Package: openclaw (npm) - Affected versions: <= 2026.4.21 - Fixed version: 2026.4.22

## Impact A time-of-check/time-of-use race around OpenShell sandbox filesystem reads could let a symlink swap cause bytes outside the intended mount root to be read.

## Fix OpenShell reads now open the file with no-follow semantics where available, validate the pinned file descriptor against the canonical mount root, reject unsafe hardlink/symlink cases, and use a strict fallback ancestor walk on platforms without fd-path readback.

## Fix Commit(s) - 95119017c847c737bd113f0bff728c4666d79c45

## Verification - The fix commit is contained in the public v2026.4.22 tag. - openclaw@2026.4.22 is published on npm and the compiled package contains the fix. - Focused regression coverage for this path passed before publication.

Thanks @VladimirEliTokarev for reporting.