What is the CVSS score of CVE-2026-32048?

CVE-2026-32048 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Openclaw are affected by CVE-2026-32048?

OpenClaw versions before 2026.3.1 contain a high-severity sandbox escape vulnerability that allows authenticated users with low privileges to disable security restrictions and execute unrestricted…. A patch is available.

Is there a public PoC exploit available for CVE-2026-32048?

Yes, a public proof-of-concept exploit is available for CVE-2026-32048. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate CVE-2026-32048?

Within 24 hours: Inventory all OpenClaw deployments and identify affected versions (prior to 2026.3.1); assess if any users have authentication credentials and low-privilege accounts. Within 7 days: Implement network segmentation to restrict cross-agent communication and disable sessions_spawn operations where operationally feasible; monitor for suspicious process creation and sandbox mode modifications. Within 30 days: Upgrade OpenClaw to version 2026.3.1 or later once patch availability is confirmed; conduct post-patch validation and security testing.

Openclaw CVE-2026-32048

EUVD-2026-13943 HIGH

Incorrect Permission Assignment for Critical Resource (CWE-732)

2026-03-21 VulnCheck

GHSA-wr92-6w3g-2hwc

Authentication Bypass Openclaw

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

PoC Detected

Mar 24, 2026 - 19:13 vuln.today

Public exploit code

EUVD ID Assigned

Mar 21, 2026 - 01:00 euvd

EUVD-2026-13943

Analysis Generated

Mar 21, 2026 - 01:00 vuln.today

CVE Published

Mar 21, 2026 - 00:42 nvd

HIGH 7.5

DescriptionCVE.org

OpenClaw versions prior to 2026.3.1 fail to enforce sandbox inheritance during cross-agent sessions_spawn operations, allowing sandboxed sessions to create child processes under unsandboxed agents. An attacker with a sandboxed session can exploit this to spawn child runtimes with sandbox.mode set to off, bypassing runtime confinement restrictions.

AnalysisAI

OpenClaw versions prior to 2026.3.1 contain a sandbox escape vulnerability that allows authenticated attackers with low privileges to bypass runtime confinement restrictions. Attackers can exploit a flaw in cross-agent sessions_spawn operations to create child processes under unsandboxed agents, effectively disabling sandbox protections by setting sandbox.mode to off. While the CVSS score is 7.5 (High), there is no evidence of active exploitation (not in CISA KEV), though the vulnerability has been publicly disclosed through GitHub Security Advisories and VulnCheck, increasing the likelihood of proof-of-concept development.

Technical ContextAI

OpenClaw is affected as identified by CPE cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:*. The vulnerability is rooted in CWE-732 (Incorrect Permission Assignment for Critical Resource), where the application fails to properly enforce sandbox inheritance policies during cross-agent process spawning operations. When a sandboxed session initiates a sessions_spawn operation across different agents, the sandbox configuration is not correctly propagated to child processes, allowing them to run with sandbox.mode disabled. This breaks the fundamental security boundary that runtime sandboxing is designed to enforce, permitting confined processes to escape their restricted execution environment.

RemediationAI

Upgrade OpenClaw to version 2026.3.1 or later, which addresses the sandbox inheritance enforcement flaw in cross-agent sessions_spawn operations. The patch details and upgrade instructions are available in the official GitHub Security Advisory at https://github.com/openclaw/openclaw/security/advisories/GHSA-p7gr-f84w-hqg5. Until patching is completed, implement defense-in-depth controls including restricting authenticated user privileges to trusted principals only, monitoring for unusual cross-agent spawn operations, implementing network segmentation to limit the blast radius of potential sandbox escapes, and enforcing strict authentication policies to reduce the pool of PR:L attackers. Review audit logs for any suspicious sessions_spawn activity that may indicate exploitation attempts.