OpenClaw Symlink Following Vulnerability in SSH Sandbox Tar Upload Allowing Arbitrary File Write

A symlink following vulnerability has been identified in OpenClaw versions prior to 2026.3.31, specifically within the SSH sandbox tar upload feature. This vulnerability allows remote attackers to write arbitrary files by uploading tar archives that contain symlinks. The symlinks can escape the sandbox environment and overwrite files on the remote host.

Impact

Exploitation of this vulnerability could lead to unauthorized overwriting of files on the remote host, potentially causing data loss or disruption of services.

Reproduction

The vulnerability can be reproduced by uploading a tar archive containing symlinks that escape the local workspace. The uploaded symlinks will be followed, allowing files to be written outside of the intended directory.

Remediation

Users can update to OpenClaw version 2026.3.31 or later, where this vulnerability has been fixed.