https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 21 Oct 2026 21:13:23 +0000 https://cve.radiocsirt.org/vuln/brew-openclaw-cli-ghsa-474h-prjg-mmw3 <p><strong>Affected:</strong> Homebrew: openclaw-cli</p> <p>### Summary Sandboxed `sessions_spawn(runtime=&#34;acp&#34;)` could bypass sandbox inheritance and initialize host-side ACP runtime. The fix now fail-closes ACP spawn from sandboxed requester sessions and rejects `sandbox=&#34;require&#34;` for `runtime=&#34;acp&#34;`.</p> <p>### Affected Packages / Versions - Package: `openclaw` (npm) - Latest published npm version at triage time: `2026.3.1` (March 2, 2026) - Vulnerable range: `&lt;=2026.3.1` - Patched release: `2026.3.2` (released)</p> <p>### Technical Details - Root cause: `runtime=&#34;subagent&#34;` enforced sandbox inheritance, while `runtime=&#34;acp&#34;` did not enforce equivalent sandbox/runtime checks. - Security impact: sandbox-boundary bypass into host-side ACP initialization. - Fixed behavior: - deny ACP spawn when requester runtime is sandboxed - deny `sessions_spawn` with `runtime=&#34;acp&#34;, sandbox=&#34;require&#34;` - align sandboxed prompt guidance to avoid advertising blocked ACP paths</p> <p>### Fix Commit(s) - `ac11f0af731d41743ba02d8595f4d0fe747336e3` - `c703aa0fe92df9fb71cf254fc46991e05fba2114`</p> <p><strong>Affected:</strong> Homebrew: openclaw-cli</p> <p>### Summary Sandboxed `sessions_spawn(runtime=&#34;acp&#34;)` could bypass sandbox inheritance and initialize host-side ACP runtime. The fix now fail-closes ACP spawn from sandboxed requester sessions and rejects `sandbox=&#34;require&#34;` for `runtime=&#34;acp&#34;`.</p> <p>### Affected Packages / Versions - Package: `openclaw` (npm) - Latest published npm version at triage time: `2026.3.1` (March 2, 2026) - Vulnerable range: `&lt;=2026.3.1` - Patched release: `2026.3.2` (released)</p> <p>### Technical Details - Root cause: `runtime=&#34;subagent&#34;` enforced sandbox inheritance, while `runtime=&#34;acp&#34;` did not enforce equivalent sandbox/runtime checks. - Security impact: sandbox-boundary bypass into host-side ACP initialization. - Fixed behavior: - deny ACP spawn when requester runtime is sandboxed - deny `sessions_spawn` with `runtime=&#34;acp&#34;, sandbox=&#34;require&#34;` - align sandboxed prompt guidance to avoid advertising blocked ACP paths</p> <p>### Fix Commit(s) - `ac11f0af731d41743ba02d8595f4d0fe747336e3` - `c703aa0fe92df9fb71cf254fc46991e05fba2114`</p> https://cve.radiocsirt.org/vuln/brew-openclaw-cli-ghsa-474h-prjg-mmw3