Openclaw cli: OpenClaw has a sandbox network isolation bypass via docker.network=container:<id> (CVE-2026-32038)

In OpenClaw CLI versions >=2026.1.29 and <2026.2.24, sandbox network hardening blocks the 'host' network mode but does not block 'container:<id>' network mode. This allows a sandbox container to join another container's network namespace, potentially reaching services accessible in that namespace. The validation function only rejects 'host' but forwards other network modes including 'container:<id>' to Docker. Exploitation requires trusted operator access to configure sandbox network settings. The issue is fixed in commit 14b6eea6e and released in version 2026.2.24.

The vulnerability allows sandboxed containers to bypass network isolation by joining another container's network namespace. This can lead to unauthorized access to internal or privileged network services exposed by the target container. The impact depends on the deployment and the ability of an attacker to influence trusted sandbox network configuration. It is not an unauthenticated remote exploit and requires configuration privileges.

Upgrade OpenClaw CLI to version 2026.2.24 or later, which includes the fix that blocks namespace-join style network modes such as 'container:<id>' for sandbox containers. Maintain strict allowlisting of safe network modes for sandbox configurations to prevent similar bypasses.