A high-severity sandbox escape flaw in OpenClaw allows authenticated subagents to manipulate parent or sibling session state, posing a significant risk to data integrity and isolation.

This vulnerability is categorized as CWE-863, Incorrect Authorization, residing within the session_status tool. It permits a local authenticated attacker, operating as a sandboxed subagent, to supply arbitrary sessionKey values to bypass security boundaries and access or modify sensitive session data.

The ability for a subagent to escape its sandbox and interact with parent or sibling session state represents a critical failure in logical isolation. Successful exploitation could lead to unauthorized data modification, privilege escalation within the application context, and the potential compromise of persisted model overrides, which may result in severe operational disruption or loss of data confidentiality. Given the CVSS score of 8.4, this vulnerability is classified as High and requires immediate attention to prevent unauthorized lateral movement within the application environment.

Immediate Action: Update the OpenClaw package to version 2026.3.11 or later to implement the necessary authorization checks.

Proactive Monitoring: Review application audit logs for anomalous access patterns or unauthorized attempts to query session state via the session_status tool.

Compensating Controls: Ensure that the principle of least privilege is strictly applied to all subagents and monitor the environment for unauthorized inter-process communication attempts.

Public Exploit Available: Unknown

Organizations utilizing OpenClaw must prioritize updating to version 2026.3.11 to remediate this authorization flaw. Failure to apply this update leaves the application vulnerable to session state manipulation, which can undermine the entire security model of the software. Patching should be treated as a high-priority maintenance task.