The vulnerability arises when OpenClaw spawns child sessions from sandboxed parents, causing the child prompts to reveal the full workspace path and related memory context. This leakage can expose sensitive directory information to an attacker, potentially aiding enumeration or further compromise. The weakness is a form of information disclosure, classified as CWE-668.

OpenClaw versions prior to 2026.4.26, running on a Node.js environment, are susceptible. The sandboxed session spawning feature is the affected component.

The CVSS score of 2.3 indicates low severity, and the EPSS score is not available, suggesting limited known exploitation activity. The vulnerability is not listed in CISA KEV. Based on the description, the likely attack vector is a local or internal attacker able to spawn child sessions within a sandboxed context, possibly through compromised session credentials or social engineering.