CVE-2026-32046
OpenClaw < 2026.2.21 - OS-level Sandbox Bypass via --no-sandbox Flag
概要
OpenClaw < 2026.2.21 - OS-level Sandbox Bypass via --no-sandbox Flag
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
OpenClaw versions prior to 2026.2.21 contain an improper sandbox configuration vulnerability that allows attackers to execute arbitrary code by exploiting renderer-side vulnerabilities without requiring a sandbox escape. Attackers can leverage the disabled OS-level sandbox protections in the Chromium browser container to achieve code execution on the host system.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- advisory vulncheck.com
- patch github.com
- patch github.com