OpenClaw Sandbox Escape Vulnerability via Cross-Agent Sessions

A vulnerability in OpenClaw versions prior to 2026.3.1 allows sandboxed sessions to bypass runtime confinement by creating child processes under unsandboxed agents. This is achieved through cross-agent 'sessions_spawn' operations, which, in mixed-agent setups, can lead to unauthorized access to resources or capabilities that are normally restricted within the sandboxed environment.

Impact

Exploitation of this vulnerability allows a sandboxed session to escape into an unsandboxed child runtime, effectively downgrading runtime confinement and potentially leading to unauthorized actions or access.

Remediation

Users can upgrade to OpenClaw version 2026.3.1 or later to address this vulnerability.