CVE-2026-32918

HIGH

OpenClaw < 2026.3.11 - Session Sandbox Escape via session_status Tool

Title source: cna

Description

OpenClaw before 2026.3.11 contains a session sandbox escape vulnerability in the session_status tool that allows sandboxed subagents to access parent or sibling session state. Attackers can supply arbitrary sessionKey values to read or modify session data outside their sandbox scope, including persisted model overrides.

References (2)

[Third Party Advisory] https://github.com/openclaw/openclaw/security/advisories/GHSA-wcxr-59v9-rxr8

[Third Party Advisory] https://www.vulncheck.com/advisories/openclaw-session-sandbox-escape-via-session-status-tool

Scores

CVSS v3 8.4

EPSS 0.0001

EPSS Percentile 2.1%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

Details

CWE

CWE-863

Status published

Products (4)

npm/openclaw 0 - 2026.3.11npm

OpenClaw/OpenClaw < 2026.3.11

openclaw/openclaw < 2026.3.11

OpenClaw/OpenClaw 2026.3.11

Published Mar 29, 2026

Tracked Since Mar 29, 2026