PT-2026-27223 · Openclaw · Openclaw

Tdjackey · Published 2026-03-09 · Updated 2026-03-23 · CVE-2026-27646

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.3.7

Description A sandbox escape issue exists in OpenClaw. Authorized sandboxed sessions can initialize host-side ACP runtime through the '/acp spawn' command. Attackers can bypass sandbox restrictions by invoking the '/acp spawn' slash-command to move from a sandboxed chat context into host-side ACP session initialization when ACP is enabled. The issue stems from a missing host-runtime guard in the /acp spawn handler, allowing sandboxed requesters to directly initialize ACP. The vulnerable code is located in src/agents/acp-spawn.ts and src/auto-reply/reply/commands-acp/lifecycle.ts. The /acp spawn command and the initializeSession() function are involved in the exploitation.

Recommendations Versions prior to 2026.3.7 should be updated to version 2026.3.7 or later.

Fix

Incorrect Authorization

Improper Access Control

Protection Mechanism Failure

Weakness Enumeration

CWE-863

CWE-284

CWE-693

Related Identifiers

CVE-2026-27646

GHSA-9Q36-67VC-RRWG

Affected Products

Openclaw

References · 7

• https://github.com/openclaw/openclaw/security/advisories/GHSA-9q36-67vc-rrwg · Vendor Advisory
• https://github.com/openclaw/openclaw/commit/61000b8e4ded919ca1a825d4700db4cb3fdc56e3 · Patch
• https://osv.dev/vulnerability/GHSA-9q36-67vc-rrwg · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-27646 · Security Note
• https://github.com/openclaw/openclaw · Note
• https://github.com/openclaw/openclaw/releases/tag/v2026.3.7 · Note
• https://vulncheck.com/advisories/openclaw-mar-sandbox-escape-via-acp-spawn-command · Note