AI agent vulnerability · OpenClaw

CVE-2026-32048: OpenClaw's sandboxed sessions_spawn now enforces sandbox inheritance for cross-agent spawns

mediumCVSS 4.0 6.9GHSA-p7gr-f84w-hqg5

Summary A sandboxed session could use cross-agent sessionsspawn to create a child under an agent configured with sandbox.mode="off", downgrading runtime confinement. Impact In mixed-agent setups that allow cross-agent spawning, a sandboxed requester could escape into an unsandboxed child runtime.

Published Mar 2, 2026 · Updated Mar 27, 2026

Affected packages

openclaw

Ecosystem: npm
Affected: < 2026.3.1
Fixed in: 2026.3.1
Check: npm ls openclaw

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

Summary

A sandboxed session could use cross-agent sessions_spawn to create a child under an agent configured with sandbox.mode="off", downgrading runtime confinement.

Impact

In mixed-agent setups that allow cross-agent spawning, a sandboxed requester could escape into an unsandboxed child runtime.

Fix

Spawn-time sandbox inheritance is now enforced: if the requester is sandboxed and the resolved child runtime would be unsandboxed, spawn is rejected.

Affected and Patched Versions

Affected: <= 2026.2.26
Patched: 2026.3.1

Credited to tdjackey.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More OpenClaw vulnerabilities

All OpenClaw entries