8.3

CVSS Score

4.0

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-44113

CVE-2026-44113: OpenClaw < 2026.4.22 - Time-of-Check/Time-of-Use Race Condition in OpenShell FS Bridge

OpenClaw before 2026.4.22 contains a time-of-check/time-of-use race condition in the OpenShell filesystem bridge that allows attackers to read files outside the intended mount root. Attackers can exploit symlink swaps during filesystem operations to bypass sandbox restrictions and access unauthorized file contents.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-44113

CVE-2026-44113:

8.3

CVSS Score

4.0

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	<= 2026.4.21	2026.4.22

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The analysis of the provided patch commit 95119017c847c737bd113f0bff728c4666d79c45 clearly indicates a TOCTOU (Time-of-check Time-of-use) vulnerability within the readFile method of the OpenShellFsBridge class in extensions/openshell/src/fs-bridge.ts. The vulnerability is caused by the separation of the security check (assertLocalPathSafety) and the file read operation (fsPromises.readFile). This allows for a race condition where the file path can be manipulated after the check, leading to unauthorized file access. The patch rectifies this by introducing the openPinnedReadableFile function, which opens a file and gets a file descriptor before performing validation. All subsequent operations are performed on this pinned file descriptor, thus eliminating the race condition. The vulnerable function is therefore OpenShellFsBridge.readFile as it existed before the patch.

Vulnerable functions

OpenShellFsBridge.readFile

extensions/openshell/src/fs-bridge.ts

The vulnerability exists in the `readFile` method of the `OpenShellFsBridge` class. The original implementation performed a path safety check (`assertLocalPathSafety`) and then read the file (`fsPromises.readFile`) in two separate steps. This created a Time-of-check Time-of-use (TOCTOU) race condition. An attacker could potentially swap a symbolic link between the check and the read operation, causing the function to read a file from outside the intended sandbox directory.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.