Openclaw cli: OpenClaw: OpenShell Mirror Sync — Sandbox Escape via Unrestricted File Sync + Symlink Traversal (CVE-2026-41397)

The OpenClaw CLI's OpenShell Mirror Sync functionality suffers from a sandbox escape vulnerability due to unrestricted file synchronization and symlink traversal. This allows an attacker with limited privileges to escape sandbox restrictions by exploiting the mirror-boundary bug. The vulnerability affects openclaw npm package versions from 2026.1.29 up to but not including 2026.3.31. The fix was introduced in version 2026.3.31, which includes hardening to prevent symlink-based uploads and downloads. The vulnerability was reported by @AntAISecurityLab and has a CVSS v3.1 score of 9.6, reflecting critical impact on confidentiality and integrity.

Successful exploitation can lead to sandbox escape, allowing an attacker with limited privileges to gain unauthorized access to the file system outside the intended sandbox environment. This compromises confidentiality and integrity of the system. Availability impact is not indicated. The vulnerability is critical due to the ease of network attack vector, low attack complexity, and no user interaction required.

Upgrade the openclaw package to version 2026.3.31 or later, which contains the official fix addressing the mirror-boundary bug and symlink traversal issues. Versions up to 2026.3.28 remain vulnerable. No additional mitigation is required once the patch is applied.