https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 01:59:36 +0000 https://vulnerability.circl.lu/vuln/brew-openclaw-cli-cve-2026-32915 <p><strong>Affected:</strong> Homebrew: openclaw-cli</p> <p>## Summary In affected versions of `openclaw`, sandboxed leaf subagents could still access the `subagents` control surface and resolve against the parent requester scope instead of remaining confined to their own session tree.</p> <p>## Impact A low-privilege sandboxed leaf worker could steer or kill a sibling run owned by the same requester and cause that sibling to execute with its own broader tool policy. This is a sandbox and session-scope boundary bypass.</p> <p>## Affected Packages and Versions - Package: `openclaw` (npm) - Affected versions: `&lt;= 2026.3.8` - Fixed in: `2026.3.11`</p> <p>## Technical Details Leaf subagents retained the `subagents` tool, and subagent control requests were authorized against the parent requester scope rather than the caller&#39;s own spawned descendants. The control path prevented only self-targeting, not cross-sibling steering.</p> <p>## Fix OpenClaw now removes `subagents` control access from leaf subagents by default, scopes subagent control to the caller&#39;s own descendants, and rejects `steer` and `kill` requests that target runs outside that descendant tree. The fix shipped in `openclaw@2026.3.11`.</p> <p>## Workarounds Upgrade to `2026.3.11` or later.</p> <p><strong>Affected:</strong> Homebrew: openclaw-cli</p> <p>## Summary In affected versions of `openclaw`, sandboxed leaf subagents could still access the `subagents` control surface and resolve against the parent requester scope instead of remaining confined to their own session tree.</p> <p>## Impact A low-privilege sandboxed leaf worker could steer or kill a sibling run owned by the same requester and cause that sibling to execute with its own broader tool policy. This is a sandbox and session-scope boundary bypass.</p> <p>## Affected Packages and Versions - Package: `openclaw` (npm) - Affected versions: `&lt;= 2026.3.8` - Fixed in: `2026.3.11`</p> <p>## Technical Details Leaf subagents retained the `subagents` tool, and subagent control requests were authorized against the parent requester scope rather than the caller&#39;s own spawned descendants. The control path prevented only self-targeting, not cross-sibling steering.</p> <p>## Fix OpenClaw now removes `subagents` control access from leaf subagents by default, scopes subagent control to the caller&#39;s own descendants, and rejects `steer` and `kill` requests that target runs outside that descendant tree. The fix shipped in `openclaw@2026.3.11`.</p> <p>## Workarounds Upgrade to `2026.3.11` or later.</p> https://vulnerability.circl.lu/vuln/brew-openclaw-cli-cve-2026-32915