CVE-2026-32048

OpenClaw < 2026.3.1 - Sandbox Escape via Cross-Agent sessions_spawn

Published Mar 21, 2026 CVSS 4.0 · 7.7 High EPSS < 1% KEV · Not listed

Description

OpenClaw versions prior to 2026.3.1 fail to enforce sandbox inheritance during cross-agent sessions_spawn operations, allowing sandboxed sessions to create child processes under unsandboxed agents. An attacker with a sandboxed session can exploit this to spawn child runtimes with sandbox.mode set to off, bypassing runtime confinement restrictions.

Analysis

Technical impact

OpenClaw versions older than 2026.3.1 permit sandboxed sessions to invoke the cross‑agent sessions_spawn operation without enforcing sandbox inheritance. The vulnerability is coded as a logic issue (CWE‑732) that enables the creation of child processes whose sandbox mode is explicitly set to off, thereby bypassing runtime confinement restrictions and exposing the host to code execution beyond the intended sandbox limits.

Affected Systems

All OpenClaw deployments running any version earlier than 2026.3.1 are affected; the concerned product is OpenClaw by the OpenClaw vendor.

Risk and Exploitability

The vulnerability carries a CVSS score of 7.7, indicating high severity. No EPSS score is reported and it is not listed in the CISA KEV catalog, but it could still be exploited where a sandboxed session can reach a cross‑agent sessions_spawn endpoint, as inferred from the description. An attacker possessing a sandboxed session can potentially cause the host to launch runtime processes with unrestricted privileges, leading to significant confidentiality and integrity risks.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

OpenClaw

unaffected

Version	Status	Constraints
`0`	affected	< 2026.3.1
`2026.3.1`	unaffected	—

Configuration 1 [-]

cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*

No data.

Vendor Product Versions

Openclaw

Version	Status	Scheme	Platform
`[0,2026.3.1)`	affected	semver	—
`2026.3.1`	unaffected	semver	—

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Upgrade OpenClaw to version 2026.3.1 or later to restore sandbox inheritance enforcement
Verify that all cross‑agent sessions_spawn calls enforce sandbox inheritance in your configuration
Re‑evaluate any unsandboxed agents to confirm they are not reachable by sandboxed sessions for process creation

Generated by OpenCVE AI on March 21, 2026 at 06:58 UTC.

Tracking

Advisories

Source	ID	Title
Github GHSA	GHSA-p7gr-f84w-hqg5	OpenClaw's sandboxed sessions_spawn now enforces sandbox inheritance for cross-agent spawns

Metrics

Attack Vector Network

Attack Complexity High

Privileges Required Low

Attack Requirements Present

User Interaction None

Vulnerable System Confidentiality Impact High

Vulnerable System Integrity Impact High

Vulnerable System Availability Impact High

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.299% probability within 30 days)

Exploitation none

Automatable no

Technical Impact total

References

Link	Providers
https://github.com/openclaw/openclaw/security/advisories/GHSA-p7gr-f84w-hqg5
https://www.vulncheck.com/advisories/openclaw-sandbox-escape-via-cross-agent-sessions-spawn

History

Mar 24, 2026 2:15 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Mar 21, 2026 5:30 AM Description updated. Title updated. First appearance in the feed. Weaknesses updated. Affected versions updated. Affected vendors updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		OpenClaw versions prior to 2026.3.1 fail to enforce sandbox inheritance during cross-agent sessions_spawn operations, allowing sandboxed sessions to create child processes under unsandboxed agents. An attacker with a sandboxed session can exploit this to spawn child runtimes with sandbox.mode set to off, bypassing runtime confinement restrictions.
Title		OpenClaw < 2026.3.1 - Sandbox Escape via Cross-Agent sessions_spawn
First Time appeared		Openclaw Openclaw openclaw
Weaknesses		CWE-732
CPEs		cpe:2.3:a:openclaw:openclaw::::::node.js::*
Vendors & Products		Openclaw Openclaw openclaw
References		https://github.com/openclaw/openclaw/security/advisories/GHSA-p7gr-f84w-hqg5 https://www.vulncheck.com/advisories/openclaw-sandbox-escape-via-cross-agent-sessions-spawn
Metrics		cvssV3_1 `{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}` cvssV4_0 `{'score': 7.7, 'vector': 'CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}`