← Database

CVE-2026-27646

MEDIUM CVSS: 6.1 Published: 2026-03-23 Modified: 2026-06-17

Description

OpenClaw versions prior to 2026.3.7 contain a sandbox escape vulnerability in the /acp spawn command that allows authorized sandboxed sessions to initialize host-side ACP runtime. Attackers can bypass sandbox restrictions by invoking the /acp spawn slash-command to cross from sandboxed chat context into host-side ACP session initialization when ACP is enabled.

Affected Platforms

Openclaw Openclaw

Weakness Type

CWE-863

References