CVE-2026-32232: Workspace Bypass in Zeptoclaw

The vulnerability stems from two primary issues: a dangling symlink component bypass and a Time-of-Check Time-of-Use (TOCTOU) condition. The dangling symlink bypass occurs when path validation fails to detect unresolved symlinks, which can later resolve to external locations. This allows attackers to craft malicious paths that escape the workspace boundaries. The TOCTOU condition arises when there's a race condition between validation and subsequent use of a file path, potentially allowing an attacker to modify the path after it's been validated but before it's used, again leading to boundary bypass. Successful exploitation could allow an attacker to read and write files outside the intended workspace, potentially gaining access to sensitive data or executing arbitrary code depending on the system's configuration.

1. Reserved2026-03-11
2. Published2026-03-12
3. Modified2026-03-14
4. EPSS updated2026-03-23

The primary mitigation for CVE-2026-32232 is to upgrade Zeptoclaw to version 0.7.6 or later, which includes the necessary fixes for the workspace boundary enforcement issues. If upgrading is not immediately feasible, consider implementing stricter path validation controls at the application level to prevent the resolution of dangling symlinks and mitigate the TOCTOU condition. This could involve using canonicalized paths and verifying file existence before performing operations. Additionally, review and restrict file permissions within the workspace to limit the potential impact of a successful exploit. After upgrading, confirm the fix by attempting to create a symlink outside the workspace and verifying that access is denied.