Four OpenClaw Flaws Enable Data Theft, Privilege Escalation, and Persistence

## Executive Summary Cyera disclosed four vulnerabilities in OpenClaw/OpenShell—dubbed "Claw Chain"—that together allow an attacker with initial code execution inside the sandbox to read sensitive files, elevate privileges to owner-level, and plant persistent backdoors by abusing TOCTOU races, improper access control, and input validation gaps; the flaws (CVEs 2026-44112/44113/44115/44118) are fixed in OpenClaw 2026.4.22 and users are advised to update.