GitHub Advisoryadvisory · npm

GHSA-p7gr-f84w-hqg5 OpenClaw's sandboxed sessions_spawn now enforces sandbox inheritance for cross-agent spawns

MEDIUM Published 2026-03-02 Modified 2026-03-27 Official page ↗
Aliases
CVE-2026-32048
Ecosystem
npm
Packages
openclaw
Severity
Moderate
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N
Weaknesses
CWE-269, CWE-284, CWE-732
Reviewed
2026-03-02

Affected packages

• npm openclaw: < 2026.3.1 → fixed in 2026.3.1

Description

Summary A sandboxed session could use cross-agent `sessions_spawn` to create a child under an agent configured with `sandbox.mode="off"`, downgrading runtime confinement. Impact In mixed-agent setups that allow cross-agent spawning, a sandboxed requester could escape into an unsandboxed child runtime. Fix Spawn-time sandbox inheritance is now enforced: if the requester is sandboxed and the resolved child runtime would be unsandboxed, spawn is rejected. Affected and Patched Versions • Affected: `<= 2026.2.26` • Patched: `2026.3.1`

Related

Alias · CVE (1)

  • CVE-2026-32048 OpenClaw versions prior to 2026.3.1 fail to enforce sandbox inheritance during cross-agent sessions_spawn operations, allowing sandboxed… vulnerability

Weakness · CWE (3)

  • CWE-269 Improper Privilege Management weakness
  • CWE-284 Improper Access Control weakness
  • CWE-732 Incorrect Permission Assignment for Critical Resource weakness

References