Which versions of Openclaw are affected by CVE-2026-32979?

OpenClaw runtime versions prior to 2026.3.11 contain a race condition vulnerability that allows authenticated users to escalate privileges and execute arbitrary code by manipulating scripts during…. A patch is available.

How to fix or mitigate CVE-2026-32979?

Within 24 hours: Identify all systems running OpenClaw runtime versions before 2026.3.11 and document their business criticality and access control. Within 7 days: Implement strict file permission controls (read-only for approved scripts) and monitor script modification logs; contact OpenClaw vendor for patch ETA and interim guidance. Within 30 days: Deploy OpenClaw runtime version 2026.3.11 or later across all affected systems; validate in test environment before production rollout.

Openclaw CVE-2026-32979

Q: What is the CVSS score of CVE-2026-32979?

CVE-2026-32979 has a CVSS 4.0 base score of 7.0 (High). CVSS vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-17018 HIGH

Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)

2026-03-29 VulnCheck

GHSA-wmgj-hrx3-23gj

GHSA-xf99-j42q-5w5p

RCE Openclaw

7.0

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

7.0 HIGH

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

Scope

Lifecycle Timeline

Patch released

Apr 07, 2026 - 02:30 nvd

Patch available

EUVD ID Assigned

Mar 29, 2026 - 13:15 euvd

EUVD-2026-17018

Analysis Generated

Mar 29, 2026 - 13:15 vuln.today

CVE Published

Mar 29, 2026 - 12:44 nvd

HIGH 7.0

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

3 npm packages depend on openclaw (3 direct, 0 indirect)

Ecosystem-wide dependent count for version 2026.3.11.

DescriptionCVE.org

OpenClaw before 2026.3.11 contains an approval integrity vulnerability allowing attackers to execute rewritten local code by modifying scripts between approval and execution when exact file binding cannot occur. Remote attackers can change approved local scripts before execution to achieve unintended code execution as the OpenClaw runtime user.

AnalysisAI

Time-of-check-time-of-use (TOCTOU) race condition in OpenClaw runtime (<2026.3.11) allows local authenticated attackers with low privileges to execute arbitrary code by modifying approved scripts between authorization and execution phases. The vulnerability (CWE-367) enables privilege escalation to the OpenClaw runtime user context, requiring user interaction but trivial attack complexity. No public exploit identified at time of analysis, though EPSS data unavailable and CVE not present in CISA KEV catalog.

Technical ContextAI

OpenClaw implements a script approval mechanism intended to verify code before execution, but suffers from a classic time-of-check-time-of-use (TOCTOU) race condition (CWE-367). The vulnerability arises when the runtime cannot establish exact file binding between the approval phase and execution phase. During this window, an attacker can swap or modify the approved script file, causing the runtime to execute altered code while believing it operates on previously-vetted content. This represents a failure in atomic operations and inadequate file integrity verification across the approval-to-execution pipeline. The CVSS 4.0 vector indicates local attack surface (AV:L) with user interaction required (UI:P), suggesting the victim must trigger script execution after the attacker modifies the file. The CPE identifier (cpe:2.3:a:openclaw:openclaw) confirms this affects the core OpenClaw application runtime environment.

RemediationAI

Upgrade immediately to OpenClaw version 2026.3.11 or later, which implements atomic file binding and integrity verification between approval and execution phases to prevent TOCTOU exploitation. Download the patched release from the official OpenClaw repository and follow standard upgrade procedures for your deployment. Review the GitHub security advisory at https://github.com/openclaw/openclaw/security/advisories/GHSA-xf99-j42q-5w5p for version-specific guidance and migration notes. If immediate patching proves infeasible, implement compensating controls including restricting write access to script directories after approval, deploying file integrity monitoring to detect unauthorized modifications, running OpenClaw with minimal privileges in isolated environments, and auditing all script execution events. However, these workarounds provide incomplete protection against determined local attackers and should be considered temporary measures only until patching completes.