https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-30T21:34:52.840639+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/brew-openclaw-cli-cve-2026-27002 BREW-openclaw-cli-CVE-2026-27002 — OpenClaw: Docker container escape via unvalidated bind mount config injection 2026-09-30T21:34:52.882022+00:00

Affected: Homebrew: openclaw-cli

## Summary A configuration injection issue in the Docker tool sandbox could allow dangerous Docker options (bind mounts, host networking, unconfined profiles) to be applied, enabling container escape or host data access.

## Affected Packages / Versions - Package: `openclaw` (npm) - Affected versions: `<= 2026.2.14` - Fixed version: `>= 2026.2.15` (next release)

## Impact If an attacker can influence sandbox Docker configuration (or an operator pastes untrusted config), they may be able to: - mount sensitive host paths (e.g. `/etc`, `/proc`, `/sys`, `/dev`, Docker socket) - use `network=host` to bypass container network isolation - use `seccompProfile=unconfined` / `apparmorProfile=unconfined` to weaken isolation

This can lead to host secret exfiltration or full host control (via Docker socket exposure).

## Fix OpenClaw now blocks dangerous sandbox Docker settings: - runtime enforcement when building `docker create` args - config-schema validation for `network=host`, `seccompProfile=unconfined`, `apparmorProfile=unconfined` - security audit findings to surface dangerous sandbox docker config

## Workarounds - Do not configure `agents.*.sandbox.docker.binds` to mount system directories or Docker socket paths. - Keep `agents.*.sandbox.docker.network` at `none` (default) or `bridge`. - Do not use `unconfined` for seccomp/AppArmor profiles.

## Fix Commit(s) - 887b209db47f1f9322fead241a1c0b043fd38339 - 1b6704ef5800152c777ea52b77aa2c8a46c13705 (docs)

## Release Process Note T…

 https://vulnerability.circl.lu/vuln/cve-2026-27002 CVE-2026-27002 — OpenClaw: Docker container escape via unvalidated bind mount config injection 2026-09-30T21:34:52.882129+00:00

Affected: openclaw

OpenClaw is a personal AI assistant. Prior to version 2026.2.15, a configuration injection issue in the Docker tool sandbox could allow dangerous Docker options (bind mounts, host networking, unconfined profiles) to be applied, enabling container escape or host data access. OpenClaw 2026.2.15 blocks dangerous sandbox Docker settings and includes runtime enforcement when building `docker create` args; config-schema validation for `network=host`, `seccompProfile=unconfined`, `apparmorProfile=unconfined`; and security audit findings to surface dangerous sandbox docker config. As a workaround, do not configure `agents.*.sandbox.docker.binds` to mount system directories or Docker socket paths, keep `agents.*.sandbox.docker.network` at `none` (default) or `bridge`, and do not use `unconfined` for seccomp/AppArmor profiles.