GitHub Advisoryadvisory · npm

GHSA-wcxr-59v9-rxr8 `OpenClaw: session_status` let sandboxed subagents access parent or sibling session state

HIGH Published 2026-03-13 Modified 2026-04-01 Official page ↗
Aliases
CVE-2026-32918
Ecosystem
npm
Packages
openclaw
Severity
High
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
Weaknesses
CWE-863
Reviewed
2026-03-13

Affected packages

• npm openclaw: < 2026.3.11 → fixed in 2026.3.11

Description

Summary The built-in `session_status` tool did not enforce the intended session-visibility boundary. A sandboxed subagent could supply another session's `sessionKey` and inspect or modify state outside its own sandbox scope. Impact This allowed a sandboxed child session to read parent or sibling session data and, in affected releases, update the target session's persisted model override. Affected versions `openclaw` `<= 2026.3.8` Patch Fixed in `openclaw` `2026.3.11` and included in later releases such as `2026.3.12`. Session visibility checks now enforce the sandbox boundary before reading or mutating session state.

Related

Alias · CVE (1)

  • CVE-2026-32918 OpenClaw before 2026.3.11 contains a session sandbox escape vulnerability in the session_status tool that allows sandboxed subagents to… vulnerability

Weakness · CWE (1)

  • CWE-863 Incorrect Authorization weakness

References