Openclaw cli: OpenClaw: Sandbox staged writes could escape the verified parent directory before commit (CVE-2026-32988)

In openclaw-cli versions <= 2026.3.10, the sandbox filesystem bridge validated the destination directory only at the final commit step. However, temporary files were created and populated before this validation, allowing a race condition where the parent directory path could be changed (aliased) to a location outside the verified writable mount. This caused the staged temporary file to be materialized outside the intended directory, bypassing sandbox protections. The fix in version 2026.3.11 ensures temporary files are created inside a pinned, verified parent directory and the final atomic replace is performed within that context.

This vulnerability allows an attacker with limited privileges to write arbitrary data outside the intended sandbox directory before the final guarded replace step. This compromises the integrity and availability of the writable mount scope by bypassing sandbox boundaries. There is no confidentiality impact reported. The CVSS 3.1 score is 7.5 (High), reflecting local attack vector, high attack complexity, low privileges required, no user interaction, scope change, no confidentiality impact, but high integrity and availability impact.

A fix is available in openclaw-cli version 2026.3.11. Users should upgrade to version 2026.3.11 or later to mitigate this vulnerability. No additional workarounds are necessary.