CVE-2026-32048 in OpenClaw
الملخص
بحسب MITRE • 21/03/2026
OpenClaw versions prior to 2026.3.1 fail to enforce sandbox inheritance during cross-agent sessions_spawn operations, allowing sandboxed sessions to create child processes under unsandboxed agents. An attacker with a sandboxed session can exploit this to spawn child runtimes with sandbox.mode set to off, bypassing runtime confinement restrictions.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.