What is the CVSS score of CVE-2026-32043?

CVE-2026-32043 has a CVSS 3.1 base score of 6.5 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Openclaw are affected by CVE-2026-32043?

CVE-2026-32043 presents notable security risk rated CVSS 6.5. Exploitation could compromise the security of affected deployments. Proof-of-concept code is publicly available.. A patch is available.

Is there a public PoC exploit available for CVE-2026-32043?

Yes, a public proof-of-concept exploit is available for CVE-2026-32043. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate CVE-2026-32043?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Vendor patch is available.

Openclaw CVE-2026-32043

EUVD-2026-13935 MEDIUM

Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)

2026-03-21 VulnCheck

GHSA-3p2x-hjxj-c7rv

Authentication Bypass Openclaw

6.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

6.5 MEDIUM

AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H

Attack Vector

Local

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

High

Availability

High

Lifecycle Timeline

PoC Detected

Mar 24, 2026 - 19:10 vuln.today

Public exploit code

EUVD ID Assigned

Mar 21, 2026 - 01:00 euvd

EUVD-2026-13935

Analysis Generated

Mar 21, 2026 - 01:00 vuln.today

Patch released

Mar 21, 2026 - 01:00 nvd

Patch available

CVE Published

Mar 21, 2026 - 00:42 nvd

MEDIUM 6.5

DescriptionCVE.org

OpenClaw versions prior to 2026.2.25 contain a time-of-check-time-of-use vulnerability in approval-bound system.run execution where the cwd parameter is validated at approval time but resolved at execution time. Attackers can retarget a symlinked cwd between approval and execution to bypass command execution restrictions and execute arbitrary commands on node hosts.

AnalysisAI

OpenClaw versions prior to 2026.2.25 contain a time-of-check-time-of-use (TOCTOU) vulnerability in the approval-bound system.run execution function where the current working directory (cwd) parameter is validated at approval time but resolved at execution time, allowing attackers with local access and limited privileges to retarget symlinked directories between approval and execution to bypass command execution restrictions and execute arbitrary commands on node hosts. The vulnerability has a CVSS score of 6.5 with medium attack complexity but high integrity and availability impact, making it a notable local privilege escalation vector that requires user interaction in the approval workflow.

Technical ContextAI

The vulnerability resides in OpenClaw's approval-bound system.run execution mechanism, which is designed to enforce command execution policies by validating requested parameters before execution (CWE-367: Improper Handling of Exceptional Conditions). The cwd parameter undergoes validation at approval time to ensure it points to an authorized directory; however, the actual path resolution occurs at execution time. An attacker with local file system access can exploit this window by creating a symlink that initially points to an approved directory, obtaining approval, then modifying the symlink to point to an unauthorized directory before execution occurs. The CPE identifier cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:* indicates all versions of OpenClaw prior to 2026.2.25 are affected by this race condition in path validation.

RemediationAI

Upgrade OpenClaw to version 2026.2.25 or later immediately, as a vendor patch is available and confirmed via the commit at https://github.com/openclaw/openclaw/commit/f789f880c934caa8be25b38832f27f90f37903db. Until patching can be completed, implement the following compensating controls: restrict local filesystem access to the OpenClaw process and approval workflow to trusted users only, enforce strict SELinux or AppArmor policies to prevent symlink traversal attacks, implement filesystem monitoring to detect suspicious symlink creation and modification patterns during approval workflows, and consider running OpenClaw in a sandboxed or containerized environment with restricted filesystem capabilities. Verify the patched version is deployed and validate that the cwd parameter validation now occurs at execution time rather than approval time.