CVE-2026-100597 OpenClaw before 2026.7.1 Path Traversal via Filesystem Race
Attackers can exploit a race condition to bypass sandbox restrictions and modify host filesystem paths outside the intended mirror root.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-100597?
CVE-2026-100597 is a high-severity vulnerability in OpenClaw, published on 26 Sep 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
OpenClaw (npm package 'openclaw') before 2026.7.1 is vulnerable to a time-of-check time-of-use race condition in OpenShell local mirror filesystem mutation operations. The remove, mkdir, and rename operations could act on a different filesystem target after OpenClaw completed its sandbox path-safety check, if the path is changed concurrently. An attacker able to win the race can cause a sandboxed operation to delete, create, or rename a host path outside the intended mirror root with the permissions of the OpenClaw process user. This does not require an operator to have granted host filesystem access outside the sandbox. The issue is fixed in 2026.7.1.
Weakness: CWE-367
Which versions are affected by CVE-2026-100597?
How do I fix CVE-2026-100597?
Upgrade to a fixed version.
Is CVE-2026-100597 being exploited?
There is no known exploitation of CVE-2026-100597 in the wild and no public exploit code.
Sources
Also known as GHSA-6c5g-hrqv-57wr, GHSA-crg9-c62w-j2p5, MINI-hmgg-qvhh-qw56.