Executive brief
OpenClaw is a file synchronization and mirroring tool used to sync files between systems. A vulnerability allows attackers with login credentials to bypass sandbox restrictions and access or modify files outside the intended sync boundaries by exploiting symlink following and unrestricted file operations, potentially exposing sensitive data or compromising system integrity.
Technical details
The vulnerability combines two weaknesses: unrestricted file upload/transfer (CWE-434) and improper symlink resolution (CWE-59). The Mirror Sync component in OpenClaw versions ≤2026.3.28 does not properly validate symlinks during file upload and download operations, allowing an authenticated attacker to traverse sandbox boundaries. An attacker can create or reference symlinks pointing to files outside the intended sync directory, enabling read or write access to arbitrary files on the system. The vulnerability requires authentication to exploit. Patch available in version 2026.3.31 and later.
Affected products
- OpenClaw OpenClaw <=2026.3.28
Timeline
- 2026-04-03: disclosed
- 2026-03-30: patched: Patch released in version 2026.3.31