PT-2026-26017 · Openclaw · Openclaw

Tdjackey · Published 2026-02-24 · Updated 2026-03-19 · CVE-2026-27523

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.2.24

Description OpenClaw contains a sandbox bind validation issue that allows attackers to bypass allowed-root and blocked-path checks. This is achieved through symlinked parent directories with non-existent leaf paths. Attackers can create bind source paths that appear to be within allowed roots but resolve outside the sandbox boundaries once missing leaf components are created, weakening bind-source isolation enforcement. The validateBindMounts function previously relied on full-path realpath only when the full source path already existed, failing to fully canonicalize parent symlink traversal before checks. This allows a source path that appears inside an allowed root to resolve outside that root, potentially including blocked runtime paths.

Recommendations Update OpenClaw to version 2026.2.24 or later.

Fix

Link Following

Path traversal

Weakness Enumeration

CWE-59

CWE-22

Related Identifiers

BDU:2026-05248

CVE-2026-27523

GHSA-M8V2-6WWH-R4GC

Affected Products

Openclaw

References · 12

• https://github.com/openclaw/openclaw/security/advisories/GHSA-m8v2-6wwh-r4gc · Vendor Advisory
• https://github.com/openclaw/openclaw/commit/b5787e4abba0dcc6baf09051099f6773c1679ec1 · Patch
• https://osv.dev/vulnerability/GHSA-m8v2-6wwh-r4gc · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-27523 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-27523 · Security Note
• https://bdu.fstec.ru/vul/2026-05248 · Security Note
• https://github.com/openclaw/openclaw · Note
• https://twitter.com/CVEnew/status/2034136424379830486 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2034132490512658471 · Twitter Post
• https://vulncheck.com/advisories/openclaw-sandbox-bind-validation-bypass-via-symlink-parent-missing-leaf-paths · Note
• https://twitter.com/RedPacketSec/status/2034433165306048623 · Twitter Post
• https://twitter.com/CVEarity/status/2034320929870975075 · Twitter Post