CVE-2026-32977 in OpenClaw

요약 (영어)

OpenClaw before 2026.3.11 contains a sandbox boundary bypass vulnerability in the fs-bridge writeFile commit step that uses an unanchored container path during the final move operation. An attacker can exploit a time-of-check-time-of-use race condition by modifying parent paths inside the sandbox to redirect committed files outside the validated writable path within the container mount namespace.

책임이 있는

VulnCheck

예약하다

2026. 03. 17.

공개

2026. 03. 31.

엔트리

VulDB provides additional information and datapoints for this CVE:

아이디	취약성	CWE	악용	대책	CVE
354361	OpenClaw 경쟁 조건	367	정의되지 않음	공식 수정	CVE-2026-32977