OpenClaw has an unspecified vulnerability (CNVD-2026-20009)

🗓️ 07 May 2026 00:00:00Reported by China National Vulnerability DatabaseType

OpenClaw vulnerability allows sandbox escape via improper symbolic link validation in the OpenShell bridge.

Reporter	Title	Published	Views	Family All 20
ATTACKERKB	CVE-2026-44113	6 May 202619:49	–	attackerkb
BDU FSTEC	The vulnerability of the AI agent OpenClaw (formerly known as ClawdBot or MoltBot) arises from synchronization errors when using a shared resource. This vulnerability allows attackers to bypass existing security mechanisms and gain unauthorized access to protected information.	10 Jun 202600:00	–	bdu_fstec
Circl	CVE-2026-44113	6 May 202621:44	–	circl
CNNVD	OpenClaw 安全漏洞	6 May 202600:00	–	cnnvd
CVE	CVE-2026-44113	6 May 202619:49	–	cve
Cvelist	CVE-2026-44113 OpenClaw < 2026.4.22 - Time-of-Check/Time-of-Use Race Condition in OpenShell FS Bridge	6 May 202619:49	–	cvelist
EUVD	EUVD-2026-28192	6 May 202621:31	–	euvd
Github Security Blog	OpenClaw: OpenShell FS bridge reads pin and verify the opened file before returning bytes	4 May 202621:07	–	github
Github Security Blog	Duplicate Advisory: OpenClaw: OpenShell FS bridge reads pin and verify the opened file before returning bytes	6 May 202621:31	–	github
NVD	CVE-2026-44113	6 May 202620:16	–	nvd