Openclaw cli: OpenClaw: workspace path guard bypass on non-existent out-of-root symlink leaf (CVE-2026-32055)

OpenClaw CLI had a vulnerability in its workspace-only path validation where an in-workspace symbolic link pointing outside the workspace to a non-existent leaf could bypass the boundary check on the first write operation. This allowed creation of files outside the workspace boundary, violating workspace isolation. The fix, included in version 2026.2.26, strengthens canonical boundary resolution to properly handle missing leaf alias paths while preserving valid in-root alias usage, closing the escape condition.

An attacker with the ability to write through the guarded workspace path could exploit this vulnerability to create files outside the designated workspace boundary. This could lead to unauthorized file creation or modification outside the intended directory, potentially impacting system integrity or security. The CVSS score of 7.6 reflects a high severity with low attack complexity and no user interaction required.

A patch is available in openclaw CLI version 2026.2.26. Users should upgrade to this version or later to remediate the vulnerability. Until the patch is applied, avoid using symlinks within the workspace that point to non-existent targets outside the workspace to reduce risk.