CVE-2026-41329 | OpenClaw before 2026.3.31 contains a sandbox bypass vulnerab… | CVSS 9.9 CRITICAL

Description

OpenClaw before 2026.3.31 contains a sandbox bypass vulnerability allowing attackers to escalate privileges via heartbeat context inheritance and senderIsOwner parameter manipulation. Attackers can exploit improper context validation to bypass sandbox restrictions and achieve unauthorized privilege escalation.

Metadata

CVE ID: CVE-2026-41329
State: PUBLISHED
Assigner: VulnCheck
Reserved: 2026-04-20 14:03 UTC
Published: 2026-04-20 23:08 UTC
Last updated: 2026-04-21 19:38 UTC
Primary CWE: CWE-648
CWE-648: Incorrect Use of Privileged APIs
Vendor / Product: OpenClaw / OpenClaw
Sources: cve.org · NVD

Severity & Metrics

9.9 CRITICAL CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

SSVC — CISA Coordinator

Exploitation: none
Automatable: no
Tech. Impact: total

Affected products (1)

Vendor	Product	Platform	Versions
OpenClaw	OpenClaw	—	0 < 2026.3.31, 2026.3.31

Weakness (CWE)

CWE	Source	Description
CWE-648	cna	CWE-648: Incorrect Use of Privileged APIs

CVSS scores (2)

Score	Severity	Version	Source	Vector
9.9	CRITICAL	3.1	cna	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
9.0	CRITICAL	4.0	cna	CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

References (3)

GitHub Security Advisory (GHSA-g5cg-8x5w-7jpm) https://github.com/openclaw/openclaw/security/advisories/GHSA-g5cg-8x5w-7jpm
Patch Commit https://github.com/openclaw/openclaw/commit/a30214a624946fc5c85c9558a27c1580172374fd
VulnCheck Advisory: OpenClaw < 2026.3.31 - Sandbox Bypass via Heartbeat Context Inheritance and senderIsOwner Escalation https://www.vulncheck.com/advisories/openclaw-sandbox-bypass-via-heartbeat-context-inheritance-and-senderisowner-escalation