CVE-2026-27670

Description

OpenClaw versions prior to 2026.3.2 contain a race condition vulnerability in ZIP extraction that allows local attackers to write files outside the intended destination directory. Attackers can exploit a time-of-check-time-of-use race between path validation and file write operations by rebinding parent directory symlinks to redirect writes outside the extraction root.

Weakness classification

• disclosure@vulncheck.com: CWE-367

Primary references

• disclosure@vulncheck.com — Patch
• disclosure@vulncheck.com — Mitigation, Vendor Advisory
• disclosure@vulncheck.com — Third Party Advisory