PT-2026-99209 · Openclaw · Openclaw
CVSS v4.0
4.8
Medium
| Vector | AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
OpenClaw versions prior to 2026.8.1
Description
A sandbox policy bypass exists in the MCP loopback component. This issue allows sandboxed coding-agent sessions to invoke tools that are explicitly restricted by the
sandbox.tools.deny policy. An attacker can list and execute these denied tools to access data or perform actions that the operator intended to exclude from the sandbox environment.Recommendations
Update to version 2026.8.1.
Exploit
Fix
Missing Authorization
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Openclaw