CVE-2026-32002
MEDIUM
openclaw
NVD
CVSS Score
5.3
Severity
MEDIUM
Published
Mar 19, 2026
Vendor
openclaw
Description
OpenClaw versions prior to 2026.2.23 contain a sandbox bypass vulnerability in the sandboxed image tool that fails to enforce tools.fs.workspaceOnly restrictions on mounted sandbox paths, allowing attackers to read out-of-workspace files. Attackers can load restricted mounted images and exfiltrate them through vision model provider requests to bypass sandbox confidentiality controls.