CVE-2026-32048CWE-732

OpenClaw < 2026.3.1 - Sandbox Escape via Cross-Agent sessions_spawn

High · published March 21, 2026

CVSS v4.0
7.7
EPSS
0%
Percentile
35.7
In the wild
Unconfirmed
What it is

OpenClaw versions prior to 2026.3.1 fail to enforce sandbox inheritance during cross-agent sessions_spawn operations, allowing sandboxed sessions to create child processes under unsandboxed agents. An attacker with a sandboxed session can exploit this to spawn child runtimes with sandbox.mode set to off, bypassing runtime confinement restrictions.

The record
Technical detail
CVSS v4.0
7.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00424 · 35.7th percentile
Weakness
CWE-732 · Incorrect Permission Assignment for Critical Resource
Published
2026-03-21T00:42Z
EPSS history
Timeline
  • 21 MAR 00:42Z
    OpenClaw < 2026.3.1 - Sandbox Escape via Cross-Agent sessions_spawn
    cvelistv5