Описание
OpenClaw versions prior to 2026.2.21 contain an improper sandbox configuration vulnerability that allows attackers to execute arbitrary code by exploiting renderer-side vulnerabilities without requiring a sandbox escape. Attackers can leverage the disabled OS-level sandbox protections in the Chromium browser container to achieve code execution on the host system.
Ссылки
- Patch
- Patch
- Vendor Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2026.2.21 (исключая)
cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*
EPSS
Процентиль: 21%
0.00288
Низкий
5.3 Medium
CVSS3
9.8 Critical
CVSS3
Дефекты
CWE-1188
Связанные уязвимости
github
6 месяцев назад
OpenClaw: Chrome --no-sandbox disabled OS-level browser sandbox in sandbox browser container
EPSS
Процентиль: 21%
0.00288
Низкий
5.3 Medium
CVSS3
9.8 Critical
CVSS3
Дефекты
CWE-1188