Description
OpenClaw versions prior to 2026.2.15 use SHA-1 to hash sandbox identifier cache keys for Docker and browser sandbox configurations, which is deprecated and vulnerable to collision attacks. An attacker can exploit SHA-1 collisions to cause cache poisoning, allowing one sandbox configuration to be misinterpreted as another and enabling unsafe sandbox state reuse.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OpenClaw | OpenClaw | < 2026.2.15 | 2026.2.15 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | openclaw | < 2026.2.15 | 2026.2.15 | GHSA-fh3f-q9qw-93j9 |
Advisories 1
- WID-SEC-2026-0441 OpenClaw: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 5, 2026
References
- GitHub Security Advisory (GHSA-fh3f-q9qw-93j9) vendor-advisory
- Patch Commit patch
- VulnCheck Advisory: OpenClaw < 2026.2.15 - Cache Poisoning via Deprecated SHA-1 Hash in Sandbox Configuration third-party-advisory