What is the CVSS score of CVE-2026-27670?

CVE-2026-27670 has a CVSS 3.1 base score of 5.3 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L. EPSS exploitation probability: 0.0%.

Which versions of Openclaw are affected by CVE-2026-27670?

CVE-2026-27670 presents moderate security risk rated CVSS 5.3. Exploitation could compromise the security of affected deployments.. A patch is available.

How to fix or mitigate CVE-2026-27670?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Vendor patch is available.

Openclaw CVE-2026-27670

EUVD-2026-13009 MEDIUM

Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)

2026-03-19 VulnCheck

Information Disclosure Openclaw

5.3

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.3 MEDIUM

AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L

Attack Vector

Local

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

Low

Lifecycle Timeline

EUVD ID Assigned

Mar 19, 2026 - 01:30 euvd

EUVD-2026-13009

Analysis Generated

Mar 19, 2026 - 01:30 vuln.today

Patch released

Mar 19, 2026 - 01:30 nvd

Patch available

CVE Published

Mar 19, 2026 - 01:00 nvd

MEDIUM 5.3

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

4 npm packages depend on openclaw (4 direct, 0 indirect)

Ecosystem-wide dependent count for version 2026.3.2.

DescriptionCVE.org

OpenClaw versions prior to 2026.3.2 contain a race condition vulnerability in ZIP extraction that allows local attackers to write files outside the intended destination directory. Attackers can exploit a time-of-check-time-of-use race between path validation and file write operations by rebinding parent directory symlinks to redirect writes outside the extraction root.

AnalysisAI

OpenClaw versions before 2026.3.2 are vulnerable to a race condition in ZIP extraction that permits local attackers with limited privileges to write arbitrary files outside the intended extraction directory. By manipulating symlinks between path validation and write operations, an attacker can achieve arbitrary file placement on the system. A patch is available to resolve this integrity issue.

Technical ContextAI

The vulnerability resides in OpenClaw's ZIP extraction functionality (cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:*), which fails to properly handle symbolic links during the extraction process. The root cause is classified under CWE-367 (Time-of-check Time-of-use Race Condition), a well-known vulnerability class where a security check occurs at one point in time but the actual operation occurs at a later point, creating an exploitable window. During extraction, the application validates that a file path is within the intended destination directory, but between this validation and the actual write operation, an attacker with local access can modify symlinks in parent directories to redirect the write operation to an arbitrary location on the filesystem. This is a classic TOCTOU vulnerability specific to archive extraction logic where symlink resolution is not atomic with file creation.

RemediationAI

Upgrade OpenClaw to version 2026.3.2 or later immediately. The vendor has released a patch committed at https://github.com/openclaw/openclaw/commit/7dac9b05dd9d38dd3929637f26fa356fd8bdd107, which addresses the TOCTOU race condition by implementing atomic path validation and file write operations. Until patching is complete, administrators should restrict local user access to systems running vulnerable versions, limit archive extraction operations to trusted sources only, and consider implementing file system-level controls such as AppArmor or SELinux policies that restrict OpenClaw's write capabilities to designated directories. Additionally, monitor extraction operations for suspicious symlink activity in parent directories of extraction targets.