CVE-2026-32018
LOW
NVD
CVSS Score
3.6
Severity
LOW
Published
Mar 19, 2026
Vendor
unknown
Description
OpenClaw versions prior to 2026.2.19 contain a race condition vulnerability in concurrent updateRegistry and removeRegistryEntry operations for sandbox containers and browsers. Attackers can exploit unsynchronized read-modify-write operations without locking to cause registry updates to lose data, resurrect removed entries, or corrupt sandbox state affecting list, prune, and recreate operations.