https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 14:50:58 +0000 https://db.gcve.eu/vuln/cve-2026-33573 <p><strong>Affected:</strong> OpenClaw</p> <p>OpenClaw before 2026.3.11 contains an authorization bypass vulnerability in the gateway agent RPC that allows authenticated operators with operator.write permission to override workspace boundaries by supplying attacker-controlled spawnedBy and workspaceDir values. Remote operators can escape the configured workspace boundary and execute arbitrary file and exec operations from any process-accessible directory.</p> <p><strong>Affected:</strong> OpenClaw</p> <p>OpenClaw before 2026.3.11 contains an authorization bypass vulnerability in the gateway agent RPC that allows authenticated operators with operator.write permission to override workspace boundaries by supplying attacker-controlled spawnedBy and workspaceDir values. Remote operators can escape the configured workspace boundary and execute arbitrary file and exec operations from any process-accessible directory.</p> https://db.gcve.eu/vuln/cve-2026-33573 https://db.gcve.eu/vuln/ghsa-2rqg-gjgv-84jm <p><strong>Affected:</strong> npm: openclaw</p> <p>### Summary</p> <p>The public gateway `agent` RPC allowed an authenticated operator with `operator.write` to supply attacker-controlled `spawnedBy` and `workspaceDir` values. That let the caller re-root the agent run outside its configured workspace boundary.</p> <p>### Impact</p> <p>A non-owner operator could escape the intended workspace boundary and run normal file and exec tools from an arbitrary process-accessible directory.</p> <p>### Affected versions</p> <p>`openclaw` `&lt;= 2026.3.8`</p> <p>### Patch</p> <p>Fixed in `openclaw` `2026.3.11` and included in later releases such as `2026.3.12`. The gateway now enforces the configured workspace boundary for agent runs regardless of caller-supplied overrides.</p> <p><strong>Affected:</strong> npm: openclaw</p> <p>### Summary</p> <p>The public gateway `agent` RPC allowed an authenticated operator with `operator.write` to supply attacker-controlled `spawnedBy` and `workspaceDir` values. That let the caller re-root the agent run outside its configured workspace boundary.</p> <p>### Impact</p> <p>A non-owner operator could escape the intended workspace boundary and run normal file and exec tools from an arbitrary process-accessible directory.</p> <p>### Affected versions</p> <p>`openclaw` `&lt;= 2026.3.8`</p> <p>### Patch</p> <p>Fixed in `openclaw` `2026.3.11` and included in later releases such as `2026.3.12`. The gateway now enforces the configured workspace boundary for agent runs regardless of caller-supplied overrides.</p> https://db.gcve.eu/vuln/ghsa-2rqg-gjgv-84jm