Four OpenClaw Flaws Enable Data Theft, Privilege Escalation, and Persistence

Cyera disclosed four chained vulnerabilities in OpenClaw that enable data theft, privilege escalation, and persistence attacks.

• •CVE-2026-44112 (CVSS 9.6): TOCTOU race condition allowing write redirection outside sandbox mount root
• •CVE-2026-44113 (CVSS 7.7): TOCTOU race condition enabling unauthorized file reads outside mount root
• •CVE-2026-44115 (CVSS 8.8): Input validation bypass via shell expansion tokens in heredoc to execute unapproved commands
• •CVE-2026-44118 (CVSS 7.8): Access control flaw allowing non-owner clients to impersonate owners and control gateway configuration

This summary was automatically generated by AI based on the original article and may not be fully accurate.