CVE-2026-100597
Received Received - Intake

Time-of-Check Time-of-Use Race Condition in OpenClaw npm Package

Publication date: 2026-09-26

Last updated on: 2026-09-26

Assigner: VulnCheck

Description
OpenClaw (npm package 'openclaw') before 2026.7.1 is vulnerable to a time-of-check time-of-use race condition in OpenShell local mirror filesystem mutation operations. The remove, mkdir, and rename operations could act on a different filesystem target after OpenClaw completed its sandbox path-safety check, if the path is changed concurrently. An attacker able to win the race can cause a sandboxed operation to delete, create, or rename a host path outside the intended mirror root with the permissions of the OpenClaw process user. This does not require an operator to have granted host filesystem access outside the sandbox. The issue is fixed in 2026.7.1.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-26
Last Modified
2026-09-26
Generated
2026-09-26
AI Q&A
2026-09-26
EPSS Evaluated
N/A
NVD
CVE-2026-100597
EUVD
EUVD-2026-87454

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
openclaw openclaw to 2026.7.1 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-367 The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

OpenClaw before version 2026.7.1 has a time-of-check time-of-use (TOCTOU) race condition in filesystem operations like remove, mkdir, and rename. After OpenClaw validates a path is safe within its sandbox, an attacker could change the path concurrently so the operation targets a different location outside the intended mirror root. This allows unauthorized filesystem mutations with the permissions of the OpenClaw process user.

Detection Guidance

Detecting this vulnerability requires checking the installed version of the openclaw npm package. Run 'npm list openclaw' to see the installed version. If the version is below 2026.7.1, the system is vulnerable. Additionally, monitor for unusual filesystem operations like unexpected deletions, directory creations, or renames outside the intended mirror root.

Impact Analysis

An attacker could exploit this to delete, create, or rename files on your system outside the sandboxed area. This could lead to data loss, unauthorized file creation, or system compromise with the same permissions as the OpenClaw process user. The impact depends on what the OpenClaw process can access.

Compliance Impact

This vulnerability could lead to unauthorized data access, modification, or deletion, which may violate GDPR's integrity and confidentiality principles or HIPAA's safeguards for protected health information. Compliance could be impacted if sensitive data is exposed or altered due to the race condition.

Mitigation Strategies

Immediately upgrade the openclaw npm package to version 2026.7.1 or later using 'npm install openclaw@latest'. If upgrading is not immediately possible, disable OpenShell filesystem mutation operations for lower-trust workloads as a temporary measure.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-100597. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart