Openclaw EUVD-2026-13943

Requires OpenClaw versions prior to 2026.3.1 with cross-agent sessions_spawn operations enabled. Attacker must have authenticated low-privilege sandboxed session access to spawn child processes with sandbox.mode disabled, bypassing runtime confinement.

The CVSS 3.1 vector (AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) indicates network-accessible exploitation with high attack complexity requiring low privileges, leading to high impact across confidentiality, integrity, and availability. The 'AC:H' (high complexity) and 'PR:L' (low privileges required) suggest exploitation requires specific conditions and authenticated access, somewhat limiting the attack surface. The vulnerability is tagged as 'Authentication Bypass' by VulnCheck, indicating it undermines security controls. Without EPSS data or KEV listing, current exploitation likelihood appears theoretical rather than observed in the wild. However, the public disclosure via GitHub Security Advisory GHSA-p7gr-f84w-hqg5 significantly increases risk as technical details are available. This represents a genuine priority for organizations running OpenClaw in multi-tenant or security-sensitive environments where sandbox escape could lead to lateral movement or privilege escalation, but may be lower priority for isolated deployments with strong network segmentation.

An authenticated attacker with low-level credentials on an OpenClaw deployment initiates a sandboxed session and leverages the cross-agent sessions_spawn functionality to create a child process. By exploiting the failure to inherit sandbox constraints, the attacker spawns a new runtime with sandbox.mode explicitly set to off, escaping the confined environment and gaining full system access to execute arbitrary code, access sensitive data, or pivot to other systems within the network.