요약
- CVE-2026-44113은(는) openclaw (openclaw), openclaw에 영향을 주는 높음 (CVSS 7.7) 취약점입니다.
- 향후 30일 내 악용 확률(EPSS): 0.25%, 전체 취약점의 16.3%보다 높음.
- 조치: 2026.4.22 이상으로 업데이트하세요.
| Package | Affected versions | Patched versions |
|---|
| openclaw | < 2026.4.22
| 2026.4.22
|
| openclaw npm | < 2026.4.22
| 2026.4.22
|
Description
Summary
OpenShell FS bridge reads pin and verify the opened file before returning bytes
Affected Packages / Versions
- Package: openclaw (npm)
- Affected versions: <= 2026.4.21
- Fixed version: 2026.4.22
Impact
A time-of-check/time-of-use race around OpenShell sandbox filesystem reads could let a symlink swap cause bytes outside the intended mount root to be read.
Fix
OpenShell reads now open the file with no-follow semantics where available, validate the pinned file descriptor against the canonical mount root, reject unsafe hardlink/symlink cases, and use a strict fallback ancestor walk on platforms without fd-path readback.
Fix Commit(s)
- 95119017c847c737bd113f0bff728c4666d79c45
Verification
- The fix commit is contained in the public v2026.4.22 tag.
- [email protected] is published on npm and the compiled package contains the fix.
- Focused regression coverage for this path passed before publication.
Thanks @VladimirEliTokarev for reporting.
NVD description
OpenClaw before 2026.4.22 contains a time-of-check/time-of-use race condition in the OpenShell filesystem bridge that allows attackers to read files outside the intended mount root. Attackers can exploit symlink swaps during filesystem operations to bypass sandbox restrictions and access unauthorized file contents.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free