A race condition in the fs-bridge writeFile commit step allows an attacker to move a file from a protected internal path to an arbitrary location outside the sandbox. By modifying parent directory names after the decision to write but before the final move that writes the file, the attacker can redirect the committed file to any writable location within the container namespace. This flaw can let an adversary create, overwrite, or delete files that should be inaccessible, thereby compromising data integrity and potentially enabling privilege escalation or persistence within the system.

The vulnerability affects all OpenClaw installations running a version earlier than 2026.3.11. Any deployment of the OpenClaw product before the specified release is potentially susceptible.

The CVSS score of 5.8 indicates moderate severity, and the EPSS score is not available; the issue is not listed in CISA's KEV catalog. Exploitation requires the attacker to be able to alter directory names inside the sandbox prior to the final file commit, implying a local or privileged attacker with write access to the sandboxed file system. The attack vector is therefore inferred as a local compromise rather than a remote exploit.