CVE-2026-44997

medium
Published 2026-05-11 · Modified 2026-05-19
CVSS v3
4.3
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS v2
VIR risk
4.3

Description

OpenClaw's ACP child sessions inherit subagent security envelope constraints

Predictions

Exploit likelihood
53%
Patch ETA

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: disclosure@vulncheck.com — https://www.vulncheck.com/advisories/openclaw-security-envelope-constraint-bypass-in-acp-child-sessions

vendor Authored 2026-05-27

Vendor advisory: disclosure@vulncheck.com — https://github.com/openclaw/openclaw/security/advisories/GHSA-q3jj-46pq-826r

vendor Authored 2026-05-27

Vendor advisory: disclosure@vulncheck.com — https://github.com/openclaw/openclaw/commit/31160dc069b7cc5d833b39c53736a41ad3befda2

Package impact

EcosystemPackageVulnerableFixed
npm npmopenclaw<2026.4.222026.4.22
npm NPMopenclaw<= 2026.4.212026.4.22

Application impact

VendorProductVersionsFixed
openclawopenclaw{"endExcluding":"2026.4.22"}2026.4.22

References

CWEs

CWE-266

Verify integrity in audit chain (admin only). AS-IS.