Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/03/02 9:53 p.m.29 views

OpenClaw's sandboxed sessions_spawn now enforces sandbox inheritance for cross-agent spawns

Summary A sandboxed session could use cross-agent sessionsspawn to create a child under an agent configured with sandbox.mode="off", downgrading runtime confinement. Impact In mixed-agent setups that allow cross-agent spawning, a sandboxed requester could escape into an unsandboxed child runtime...

9.9CVSS5.9AI score0.00281EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder