https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 12:30:09 +0000 https://vulnerability.circl.lu/vuln/cve-2026-32915 <p><strong>Affected:</strong> OpenClaw</p> <p>OpenClaw before 2026.3.11 contains a sandbox boundary bypass vulnerability allowing leaf subagents to access the subagents control surface and resolve against parent requester scope instead of their own session tree. A low-privilege sandboxed leaf worker can steer or kill sibling runs and cause execution with broader tool policies by exploiting insufficient authorization checks on subagent control requests.</p> <p><strong>Affected:</strong> OpenClaw</p> <p>OpenClaw before 2026.3.11 contains a sandbox boundary bypass vulnerability allowing leaf subagents to access the subagents control surface and resolve against parent requester scope instead of their own session tree. A low-privilege sandboxed leaf worker can steer or kill sibling runs and cause execution with broader tool policies by exploiting insufficient authorization checks on subagent control requests.</p> https://vulnerability.circl.lu/vuln/cve-2026-32915 https://vulnerability.circl.lu/vuln/ghsa-4w7m-58cg-cmff <p><strong>Affected:</strong> npm: openclaw</p> <p>## Summary In affected versions of `openclaw`, sandboxed leaf subagents could still access the `subagents` control surface and resolve against the parent requester scope instead of remaining confined to their own session tree.</p> <p>## Impact A low-privilege sandboxed leaf worker could steer or kill a sibling run owned by the same requester and cause that sibling to execute with its own broader tool policy. This is a sandbox and session-scope boundary bypass.</p> <p>## Affected Packages and Versions - Package: `openclaw` (npm) - Affected versions: `&lt;= 2026.3.8` - Fixed in: `2026.3.11`</p> <p>## Technical Details Leaf subagents retained the `subagents` tool, and subagent control requests were authorized against the parent requester scope rather than the caller&#39;s own spawned descendants. The control path prevented only self-targeting, not cross-sibling steering.</p> <p>## Fix OpenClaw now removes `subagents` control access from leaf subagents by default, scopes subagent control to the caller&#39;s own descendants, and rejects `steer` and `kill` requests that target runs outside that descendant tree. The fix shipped in `openclaw@2026.3.11`.</p> <p>## Workarounds Upgrade to `2026.3.11` or later.</p> <p><strong>Affected:</strong> npm: openclaw</p> <p>## Summary In affected versions of `openclaw`, sandboxed leaf subagents could still access the `subagents` control surface and resolve against the parent requester scope instead of remaining confined to their own session tree.</p> <p>## Impact A low-privilege sandboxed leaf worker could steer or kill a sibling run owned by the same requester and cause that sibling to execute with its own broader tool policy. This is a sandbox and session-scope boundary bypass.</p> <p>## Affected Packages and Versions - Package: `openclaw` (npm) - Affected versions: `&lt;= 2026.3.8` - Fixed in: `2026.3.11`</p> <p>## Technical Details Leaf subagents retained the `subagents` tool, and subagent control requests were authorized against the parent requester scope rather than the caller&#39;s own spawned descendants. The control path prevented only self-targeting, not cross-sibling steering.</p> <p>## Fix OpenClaw now removes `subagents` control access from leaf subagents by default, scopes subagent control to the caller&#39;s own descendants, and rejects `steer` and `kill` requests that target runs outside that descendant tree. The fix shipped in `openclaw@2026.3.11`.</p> <p>## Workarounds Upgrade to `2026.3.11` or later.</p> https://vulnerability.circl.lu/vuln/ghsa-4w7m-58cg-cmff