OpenClaw before 2026.3.31 contains a time-of-check-time-of-use race condition in the remote filesystem bridge readFile function that allows sandbox escape. Atta…

CVE-2026-41296 affects OpenClaw versions before 2026.3.31, containing a time-of-check-time-of-use (TOCTOU) race condition in the remote filesystem bridge readFile function. This vulnerability allows attackers to achieve sandbox escape by exploiting the timing gap between path validation and file read operations. The flaw enables bypassing sandbox restrictions to read arbitrary files on the system. The vulnerability has been addressed in OpenClaw version 2026.3.31 and later. Security advisories and patches are available through GitHub.