https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T20:25:08.300575+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/brew-openclaw-cli-cve-2026-42434 BREW-openclaw-cli-CVE-2026-42434 — OpenClaw: Sandboxed agents could escape exec routing via host=node override 2026-10-04T20:25:08.367227+00:00

Affected: Homebrew: openclaw-cli

## Summary

Sandboxed agents could escape exec routing via host=node override.

## Affected Packages / Versions

- Package: `openclaw` - Ecosystem: npm - Affected versions: `>= 2026.4.5 < 2026.4.10` - Patched versions: `>= 2026.4.10`

## Impact

A sandboxed agent could request `host: "node"` and route exec to a remote node instead of the intended sandbox execution path, bypassing the sandbox routing boundary.

## Technical Details

The fix blocks sandboxed exec escape to remote node targets and keeps routing aligned with the active sandbox policy.

## Fix

The issue was fixed in #63880. The first stable tag containing the fix is `v2026.4.10`, and `openclaw@2026.4.14` includes the fix.

## Fix Commit(s)

- `dffad08529202edbf34e4808788e1182fe10f6a9` - PR: #63880

## Release Process Note

Users should upgrade to `openclaw` 2026.4.10 or newer. The latest npm release, `2026.4.14`, already includes the fix.

## Credits

Thanks to @zsxsoft, with sponsorship from @KeenSecurityLab and @qclawer for reporting this issue.

 https://cve.radiocsirt.org/vuln/euvd-2026-308526 EUVD-2026-308526 2026-10-04T20:25:08.367297+00:00 EUVD-2026-308526 https://cve.radiocsirt.org/vuln/fkie_cve-2026-42434 fkie_cve-2026-42434 2026-10-04T20:25:08.367314+00:00

OpenClaw versions 2026.4.5 before 2026.4.10 contain a sandbox escape vulnerability allowing sandboxed agents to override exec routing by specifying host=node. Attackers can bypass sandbox boundaries and route execution to remote nodes instead of intended sandbox paths.

 https://cve.radiocsirt.org/vuln/ghsa-736r-jwj6-4w23 GHSA-736r-jwj6-4w23 — OpenClaw: Sandboxed agents could escape exec routing via host=node override 2026-10-04T20:25:08.367337+00:00

Affected: npm: openclaw

## Summary

Sandboxed agents could escape exec routing via host=node override.

## Affected Packages / Versions

- Package: `openclaw` - Ecosystem: npm - Affected versions: `>= 2026.4.5 < 2026.4.10` - Patched versions: `>= 2026.4.10`

## Impact

A sandboxed agent could request `host: "node"` and route exec to a remote node instead of the intended sandbox execution path, bypassing the sandbox routing boundary.

## Technical Details

The fix blocks sandboxed exec escape to remote node targets and keeps routing aligned with the active sandbox policy.

## Fix

The issue was fixed in #63880. The first stable tag containing the fix is `v2026.4.10`, and `openclaw@2026.4.14` includes the fix.

## Fix Commit(s)

- `dffad08529202edbf34e4808788e1182fe10f6a9` - PR: #63880

## Release Process Note

Users should upgrade to `openclaw` 2026.4.10 or newer. The latest npm release, `2026.4.14`, already includes the fix.

## Credits

Thanks to @zsxsoft, with sponsorship from @KeenSecurityLab and @qclawer for reporting this issue.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1161 WID-SEC-W-2026-1161 — OpenClaw: Mehrere Schwachstellen 2026-10-04T20:25:08.367372+00:00

Ein Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um erweiterte Rechte zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen oder zu manipulieren oder andere, nicht näher spezifizierte Angriffe durchzuführen.