by Kastro
Paper/Archive/CVE-2026-32048

CVE-2026-32048

OpenClaw OpenClaw — OpenClaw < 2026.3.1 - Sandbox Escape via Cross-Agent sessions_spawn

EPSS 0.3%CVSS 9.9
critical.is priorityof 100
34
CVSS 9.9 (NVD)9.9 / 10 × 3029.7Not in CISA KEV+300.0EPSS percentile 21.8.218 × 204.4No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

OpenClaw versions prior to 2026.3.1 fail to enforce sandbox inheritance during cross-agent sessions_spawn operations, allowing sandboxed sessions to create child processes under unsandboxed agents. An attacker with a sandboxed session can exploit this to spawn child runtimes with sandbox.mode set to off, bypassing runtime confinement restrictions.

Affected

ProductAffectedFixed inSource
OpenClaw< 2026.3.12026.3.1CNA

Scores by source

NVD9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
VulnCheck (CNA)7.7CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
VulnCheck (CNA)7.5CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

advisorygithub.com/openclaw/openclaw/security/advisories/GHSA-p7gr-f84w-hqg5writeupvulncheck.com/advisories/openclaw-sandbox-escape-via-cross-agent-sessions-spawn