Description
OpenClaw before 2026.3.11 contains a sandbox boundary bypass vulnerability allowing leaf subagents to access the subagents control surface and resolve against parent requester scope instead of their own session tree. A low-privilege sandboxed leaf worker can steer or kill sibling runs and cause execution with broader tool policies by exploiting insufficient authorization checks on subagent control requests.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OpenClaw | OpenClaw | < 2026.3.11 | 2026.3.11 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | openclaw | < 2026.3.11 | 2026.3.11 | GHSA-4w7m-58cg-cmff |
Advisories 1
- WID-SEC-2026-0727 OpenClaw: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 31, 2026
References
- GitHub Security Advisory (GHSA-4w7m-58cg-cmff) vendor-advisory
- VulnCheck Advisory: OpenClaw < 2026.3.11 - Sandbox Boundary Bypass via Subagent Control Surface third-party-advisory