Openclaw cli: OpenClaw: Docker container escape via unvalidated bind mount config injection (CVE-2026-27002)

A configuration injection vulnerability in OpenClaw CLI's Docker sandbox allows attackers or misconfigured operators to inject dangerous Docker options such as bind mounts to sensitive host directories, host networking, and unconfined seccomp or AppArmor profiles. These options can lead to container escape or host compromise by exposing the Docker socket or sensitive host files. The vulnerability affects versions >=2026.1.29 and <2026.2.15. The fix, introduced in version 2026.2.15, enforces runtime checks on Docker create arguments, validates configuration schemas to disallow unsafe settings, and includes security audit enhancements.

If exploited, this vulnerability can allow an attacker to mount critical host directories (e.g., /etc, /proc, /sys, /dev, Docker socket), bypass container network isolation using host networking, and disable container security profiles. This can result in exfiltration of host secrets or full host control via Docker socket exposure.

A fix is available in OpenClaw CLI version 2026.2.15 and later, which blocks dangerous Docker sandbox settings and validates configuration schemas. Until upgrading, avoid configuring sandbox Docker bind mounts to system directories or Docker socket paths, keep Docker network settings at 'none' or 'bridge', and do not use 'unconfined' for seccomp or AppArmor profiles.