OpenClaw versions before 2026.3.31 contain a symlink following vulnerability in the SSH sandbox tar upload functionality. Remote attackers can exploit this vulnerability by uploading specially crafted tar archives containing symlinks. The vulnerability allows attackers to escape the sandbox environment and write arbitrary files on the remote host. This represents a significant security risk as it bypasses sandbox protections and enables unauthorized file system access. The issue has been addressed in version 2026.3.31 and later releases.