CVE-2026-32055: Workspace Bypass in openclaw

The vulnerability stems from insufficient validation of symlinks within the workspace. An attacker can craft a malicious symlink that points outside the designated workspace to a non-existent file. When a write operation is performed through this symlink, the validation process fails to properly check the target location, allowing the attacker to create a file outside the workspace boundaries. This could lead to unauthorized file creation, modification, or deletion in sensitive areas of the system, potentially enabling privilege escalation or data exfiltration. The impact is amplified if the workspace contains sensitive data or configuration files.

1. Reserved2026-03-10
2. Published2026-03-12
3. Modified2026-03-30
4. EPSS updated2026-03-28

The primary mitigation is to upgrade openclaw to version 2026.2.26 or later. If upgrading is not immediately feasible, consider implementing stricter workspace access controls to limit the potential impact of a successful exploit. Review and restrict symlink usage within the workspace. WAF rules could be configured to detect and block requests containing suspicious symlink paths. Monitor file system activity for unexpected file creations outside the intended workspace. After upgrading, verify the fix by attempting to create a file outside the workspace using a crafted symlink; the operation should be denied.