CVE-2026-39398

...

CVE-2026-39398

OpenClaw-ClaudE-Bridge vulnerability CVE-2026-39398 affects v1.1.0. The issue: the CLI flag --allowed-tools is used in an auto-approve manner, not a restriction, so the sandbox remains ineffective because all CLI tools remain nominally available. The fix is to upgrade to v1.1.1, which switches to...