CVE-2026-41329 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

OpenClaw before 2026.3.31 contains a sandbox bypass vulnerability allowing attackers to escalate privileges via heartbeat context inheritance and senderIsOwner…
Critical CVSS: 9.0

CVE-2026-41329

OpenClaw before 2026.3.31 contains a sandbox bypass vulnerability allowing attackers to escalate privileges via heartbeat context inheritance and senderIsOwner parameter manipulation. Attackers can exploit improper context validation to bypass sandbox restrictions and achieve unauthorized privilege escalation.
Vendor
-
Product
-
CWE
CWE-648
Yayın Tarihi
2026-04-21 00:16:31
Güncelleme
2026-04-21 00:16:31
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-

Kategoriler

CWE-648 CRITICAL 2026

Referanslar

https://github.com/openclaw/openclaw/commit/a30214a624946fc5c85c9558a27c1580172374fd https://github.com/openclaw/openclaw/security/advisories/GHSA-g5cg-8x5w-7jpm https://www.vulncheck.com/advisories/openclaw-sandbox-bypass-via-heartbeat-context-inheritance-and-senderisowner-escalation