PT-2026-49030

CVE-2026-53826

Published

2026-06-12

Updated

2026-07-02

Description by

CVSS 4.0

5.3

Medium

MetricsAV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.4.26

Description An information disclosure issue exists in sandboxed session spawning that exposes the real workspace path to child prompts. This allows attackers to reveal the host workspace location or related memory context to child models by spawning child sessions from sandboxed parents.

Recommendations Update to version 2026.4.26.

Exploitability

Exploit

Fix

Impacts

Researchers

Anshuman Bhartiya

Vendors

Affected products

Weakness enumeration

CWE-668: Exposure of Resource to Wrong Sphere

Related identifiers