PT-2026-37006

Name of the Vulnerable Software and Affected Versions OpenClaw versions 2026.4.5 through 2026.4.9 Description Sandboxed agents can escape exec routing by specifying host=node. This allows attackers to bypass sandbox boundaries and route execution to remote nodes instead of the intended sandbox...