Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenClaw before 2026.3.31 contains a sandbox escape vulnerability allowing attackers to traverse directory boundaries through symlink exploitation during file synchronization operations. Remote attackers can bypass sandbox restrictions by crafting malicious symlinks in mirror sync operations to access arbitrary files outside intended boundaries.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-41397 OpenClaw before 2026.3.31 contains a sandbox escape vulnerability allowing attackers to traverse directory boundaries through symlink exploitation during file synchro… https://www.cve.org/CVERecord?id=CVE-2026-41397
Post summary
The text announces CVE-2026-41397, outlining a sandbox escape in OpenClaw that enables directory traversal via symlink exploitation, but provides neither PoC nor patch information.
CVE-2026-41397 Sandbox Escape via Symlink Exploitation in OpenClaw Before 2026.3.31 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-41397
Post summary
The post announces CVE‑2026‑41397, a sandbox escape vulnerability in OpenClaw that exploits symlinks. No PoC, exploitation evidence, or patch details are included.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openclaw | openclaw | - | node.js | - |