by Kastro
Paper/Archive/CVE-2026-32918

CVE-2026-32918

OpenClaw OpenClaw — OpenClaw < 2026.3.11 - Session Sandbox Escape via session_status Tool

EPSS 0.1%CVSS 9.2
critical.is priorityof 100
28
CVSS 9.2 (CNA)9.2 / 10 × 3027.6Not in CISA KEV+300.0EPSS percentile 1.0.010 × 200.2No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

OpenClaw before 2026.3.11 contains a session sandbox escape vulnerability in the session_status tool that allows sandboxed subagents to access parent or sibling session state. Attackers can supply arbitrary sessionKey values to read or modify session data outside their sandbox scope, including persisted model overrides.

Affected

ProductAffectedFixed inSource
OpenClaw< 2026.3.112026.3.11CNA

Scores by source

VulnCheck (CNA)9.2CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N
VulnCheck (CNA)8.4CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

advisorygithub.com/openclaw/openclaw/security/advisories/GHSA-wcxr-59v9-rxr8writeupvulncheck.com/advisories/openclaw-session-sandbox-escape-via-session-status-tool