Time-of-Check-Time-of-Use Vulnerability in OpenClaw by OpenClaw

CVE-2026-41338

What is CVE-2026-41338?

OpenClaw versions before 2026.3.31 are susceptible to a time-of-check-time-of-use vulnerability within its sandbox file operations. This flaw enables attackers to exploit the check-then-act race condition, particularly during the apply_patch, remove, and mkdir operations. By bypassing file descriptor-based defenses, malicious actors can manipulate files between the validation and execution stages, potentially leading to unauthorized file modifications and security breaches.

References