PT-2026-49030 · Openclaw · Openclaw

Anshuman Bhartiya

·

CVE-2026-53826

·

Published

2026-06-12

·

Updated

2026-07-02

CVSS v4.0

5.3

Medium

VectorAV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.4.26
Description An information disclosure issue exists in sandboxed session spawning that exposes the real workspace path to child prompts. This allows attackers to reveal the host workspace location or related memory context to child models by spawning child sessions from sandboxed parents.
Recommendations Update to version 2026.4.26.

Exploit

Fix

Exposure of Resource to Wrong Sphere

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-668

Related Identifiers

CVE-2026-53826
GHSA-6C4R-G249-WV3C

Affected Products

Openclaw