OpenClaw Cache Poisoning Vulnerability via Deprecated SHA-1 Hashing in Sandbox Configurations

A cache poisoning vulnerability has been identified in OpenClaw versions prior to 2026.2.15. The issue arises because these versions use SHA-1 to hash sandbox identifier cache keys for Docker and browser configurations. SHA-1 is deprecated and susceptible to collision attacks, which an attacker could exploit to poison the cache. This would allow one sandbox configuration to be misrepresented as another, leading to unsafe reuse of sandbox states.

Impact

Exploitation of this vulnerability could result in cache poisoning, where one sandbox configuration is incorrectly recognized as another. This misrepresentation could allow for the unsafe reuse of sandbox states, potentially leading to security risks such as container escape.

Remediation

Users can upgrade to OpenClaw version 2026.2.15 or later to address this vulnerability.