Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

OpenClaw/OpenShell managed sandbox backend Claw Chain (multiple vulnerabilities)

Vulnerability
First reported
Last updated
Happening score
H score 31
2 unique sources, 2 articles

Summary

Hide ▲

Researchers disclosed four OpenClaw flaws in the OpenShell managed sandbox backend that can be chained for data theft, privilege escalation, and persistence. The set includes CVE-2026-44112, CVE-2026-44113, CVE-2026-44115, and CVE-2026-44118. The chain can bypass sandbox restrictions, read or redirect writes outside the intended mount root, execute unapproved commands, and impersonate an owner. OpenClaw version 2026.4.22 fixes the flaws, and users were told to update.

Related Happenings

OpenClaw command-injection, path-traversal, and link-following flaws (multiple vulnerabilities)

Vulnerability
H score33 First: 10.07.2026 17:19 Last: 10.07.2026 17:19 Sources 1

About this happening: OpenClaw now has three patched high-severity vulnerabilities that can lead to credential theft, privilege escalation, and arbitrary code execution on the host....

Open Happening

OpenClaw outbound-mail approval gates and trust-scoped connector controls

Defensive Guidance
H score11 First: 11.06.2026 20:46 Last: 11.06.2026 20:46 Sources 1

About this happening: OpenClaw operators are adding outbound-mail approval gates, trust-scoped connector access, and human approval for risky actions to reduce agent phishing and unauth...

Open Happening

OpenClaw message-object prompt injection patched in 2026.4.23 security flaw

Vulnerability
H score15 First: 11.06.2026 20:46 Last: 11.06.2026 20:46 Sources 1

About this happening: OpenClaw has a patched message-object prompt injection flaw that let hidden instructions inside shared contacts, vCards, and location pins reach the LLM as trusted pro...

Open Happening

TroyDen's Lure Factory GitHub Trojanized package campaign

Campaign
H score41 First: 24.03.2026 16:59 Last: 24.03.2026 16:59 Sources 1

About this happening: The TroyDen's Lure Factory campaign is distributing 300+ Trojanized GitHub packages, broadening supply-chain risk for developers, gamers, and the general public. One o...

Open Happening

OpenClaw hardening guidance (CNCERT)

Advisory/Mitigation
H score24 First: 14.03.2026 18:17 Last: 14.03.2026 18:17 Sources 1

About this happening: China's CNCERT issued mitigation guidance for OpenClaw, warning that weak defaults and privileged access could let attackers seize endpoints, leak data, or trigger destruc...

Open Happening

Timeline

  1. 15.05.2026 16:35 2 articles · 2mo ago

    Cyera discloses Claw Chain flaws in OpenClaw

    Initial Disclosure

    Cyera disclosed four OpenClaw vulnerabilities in the OpenShell managed sandbox backend—CVE-2026-44112, CVE-2026-44113, CVE-2026-44115, and CVE-2026-44118—that can be chained after code execution in the sandbox to bypass restrictions, read files outside the intended mount root, execute unapproved commands, impersonate an owner, and establish persistence; OpenClaw said the issues were addressed in version 2026.4.22.

    Show sources
    Open in new tab