Threats tagged 'ghsa-gj9q-8w99-mp8j'

OpenClaw versions prior to 2026.4.10 contain a time-of-check to time-of-use (TOCTOU) race condition in the exec script preflight validator. This flaw allows a local attacker with write access to the workspace path to swap the target file between validation and reading, causing the preflight analysis to inspect a different file than originally validated. The impact is limited as the validator only exposes derived preflight content, not full file disclosure. The issue was fixed in version 2026.4.10 by replacing the check-then-read flow with an atomic pinned file descriptor open that verifies file identity securely.