npm/openclaw CVE-2026-32988: high 7.5, EPSS 0.11%

OpenClaw: Sandbox staged writes could escape the verified parent directory before commit

Action: Upgrade openclaw to 2026.3.11 or later.

npm i openclaw@2026.3.11

Affected

Fixed versions

Sources

• osv: GHSA-mj4p-rc52-m843
• https://github.com/openclaw/openclaw/security/advisories/GHSA-mj4p-rc52-m843
• https://github.com/openclaw/openclaw
• https://github.com/openclaw/openclaw/releases/tag/v2026.3.11

CVE-2026-32988 · published 2026-03-13T15:48:16Z · modified 2026-07-08T07:35:35.712278549Z · JSON