A high-severity sandbox escape vulnerability in OpenClaw allows an authenticated attacker to spawn child processes with elevated privileges, bypassing critical runtime confinement.

The flaw resides in the handling of cross-agent sessions_spawn operations, where the system fails to enforce sandbox inheritance correctly. An authenticated attacker with a sandboxed session can exploit this to launch child runtimes with sandbox mode disabled.

The ability to escape a sandbox environment poses a significant risk to system integrity and data confidentiality. By bypassing runtime confinement, an attacker can execute code outside the intended security boundaries, potentially leading to unauthorized system access or lateral movement within the infrastructure. With a CVSS score of 7.5, this vulnerability requires immediate attention to prevent potential compromise of the host environment.

Immediate Action: Update the OpenClaw package to version 2026.3.1 or later to ensure the sandbox inheritance logic is correctly enforced.

Proactive Monitoring: Review system logs for unusual process spawning activities, specifically looking for child runtimes that deviate from established security profiles.

Compensating Controls: Ensure that agents are running with the principle of least privilege, as this limits the potential reach of a process even if the sandbox is bypassed.

Public Exploit Available: Unknown.

Given the potential for complete sandbox breakout and the associated risk of unauthorized process execution, organizations should prioritize the update to version 2026.3.1. Applying this patch is the only effective way to neutralize the risk, as it corrects the fundamental permission assignment error within the session spawning mechanism.