An incorrect authorization vulnerability in OpenClaw allows authenticated sandboxed agents to escape their sandbox and achieve total system compromise on remote nodes.

This flaw stems from an incorrect authorization weakness, tracked as CWE-863, where sandboxed agents can override execution routing by specifying a host parameter. Low privileges are required to trigger this via network vectors with no user interaction.

A successful exploit grants attackers the ability to break out of isolation boundaries, leading to complete confidentiality, integrity, and availability loss on affected target nodes. Given the high CVSS score of 8.8, organizations face significant risks of unauthorized administrative access, data exfiltration, and lateral movement within infrastructure environments.

Immediate Action: Update the OpenClaw npm package to version 2026.4.10 or later where the host parameter override flaw is resolved.

Proactive Monitoring: Monitor access logs and network telemetry for anomalous execution routing patterns, particularly commands directed from sandboxed agents to unexpected remote nodes.

Compensating Controls: Enforce strict network segmentation around sandbox worker nodes to restrict unauthorized inter-node communication if immediate patching is not possible.

Public Exploit Available: No - no confirmed public exploit exists in the available data.

Security teams must treat this sandbox escape flaw with high urgency due to the severity of potential remote node compromise. Administrators should verify package versions immediately and apply the vendor patch to prevent unauthorized routing manipulations by sandboxed agents.