PT-2026-26729

CVE-2026-32046

Publicado

2026-03-03

Atualizado

2026-03-21

Descrição por

CVSS 3.1

9.8

Crítica

MétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.2.21

Description The software contains an improper sandbox configuration that could allow attackers to execute arbitrary code. This is achieved by exploiting renderer-side issues without needing to escape the sandbox. The OS-level sandbox protections within the Chromium browser container are disabled, enabling code execution on the host system.

Recommendations Update OpenClaw to version 2026.2.21 or later.

Explorabilidade

Exploit

Correção

Impactos

Pesquisadores

Rafael M

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-1188: Initialization of a Resource with an Insecure Default

CWE-693: Protection Mechanism Failure