CVE-2026-100597: OpenClaw before 2026.7.1 Path Traversal via Filesystem Race
OpenClaw (npm package 'openclaw') before 2026.7.1 is vulnerable to a time-of-check time-of-use race condition in OpenShell local mirror filesystem mutation operations. The remove, mkdir, and rename operations could act on a different filesystem target after OpenClaw completed its sandbox path-safety check, if the path is changed concurrently. An attacker able to win the race can cause a sandboxed operation to delete, create, or rename a host path outside the intended mirror root with the permissions of the OpenClaw process user. This does not require an operator to have granted host filesystem access outside the sandbox. The issue is fixed in 2026.7.1.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
npm/openclawto a version that resolves this vulnerability.Fixed in 2026.7.1
Event History
Frequently Asked Questions
Which filesystem actions can be redirected outside the intended mirror root?
The affected OpenShell local mirror mutation operations are remove, mkdir, and rename. A successful race can cause these operations to act on a different host filesystem target after the sandbox safety check completes.
What does an attacker need to do to exploit this issue?
The attacker must be able to change the relevant path concurrently and win the time-of-check time-of-use race. The resulting filesystem action runs with the permissions of the OpenClaw process user.
Does exploitation require an operator to grant host filesystem access outside the sandbox?
No. The issue can cause an operation to reach a host path outside the intended mirror root even when such access was not explicitly granted.
What version fixes the issue?
OpenClaw version 2026.7.1 fixes the vulnerability. Versions before 2026.7.1 are affected.