CVE-2026-41329

OpenClaw versions prior to 2026.3.31 contain a critical sandbox bypass vulnerability that allows authenticated attackers to escalate privileges through manipulation of heartbeat context inheritance and the senderIsOwner parameter. The vulnerability exploits improper context validation mechanisms to circumvent sandbox restrictions and gain unauthorized elevated access. The vulnerability carries a CVSS severity rating of 9.9 CRITICAL with a network-based attack vector requiring only low complexity and low privilege access. The attack requires no user interaction and can compromise the entire system scope, resulting in complete compromise of confidentiality, integrity, and availability. The broader vulnerability landscape context indicates this poses a greater threat than approximately 99.89 percent of known CVEs. Currently, there is no evidence of active exploitation in the wild or public availability of functional exploit code. The vulnerability has not been assigned CVE/KEV status and remains inactive on threat intelligence watch lists. However, organizations running vulnerable versions should prioritize patching to OpenClaw 2026.3.31 or later due to the critical severity rating and relatively low exploitation barriers for motivated threat actors.