Time-of-Check-Time-of-Use Vulnerability in OpenClaw by OpenClaw Team

CVE-2026-43529

What is CVE-2026-43529?

OpenClaw versions prior to 2026.4.10 are susceptible to a time-of-check-time-of-use (TOCTOU) vulnerability. This issue resides in the validateScriptFileForShellBleed function, enabling local attackers to exploit a race condition. The flaw occurs due to workspace boundary checks being bypassed, allowing an attacker with write access to interchange the target file during validation and preflight reading. This results in the validator examining an alternative file identity instead of the initially verified one, leading to potential unauthorized access.

References