GHSA-rm5c-4rmf-vvhw: OpenClaw: Sandbox file operations use check-then-act, bypassing fd-based TOCTOU defenses

April 3, 2026

Sandbox file operations use check-then-act, bypassing fd-based TOCTOU defenses

References

github.com/advisories/GHSA-rm5c-4rmf-vvhw
github.com/openclaw/openclaw
github.com/openclaw/openclaw/commit/32a4a47d602e0618f87b3e59f94d8c142767f860
github.com/openclaw/openclaw/releases/tag/v2026.3.31
github.com/openclaw/openclaw/security/advisories/GHSA-rm5c-4rmf-vvhw

Code Behaviors & Features

Detect and mitigate GHSA-rm5c-4rmf-vvhw with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →