OpenClaw versions before 2026.6.6 contain a network policy bypass vulnerability in the sandbox exec-server that allows lower-trust callers to reach… (CVE-2026-62201)
Description
OpenClaw versions before 2026.6.6 have a network policy bypass vulnerability in the sandbox exec-server. This flaw allows lower-trust callers to send HTTP requests through the exec-server to internal network destinations that should be blocked by OpenClaw's configured policies. The vulnerability enables unauthorized access to restricted network resources.
CVSS v4.0
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-62201 describes a network policy bypass vulnerability in OpenClaw's sandbox exec-server present in versions before 2026.6.6. The vulnerability permits lower-trust callers to circumvent network restrictions by sending HTTP requests to internal network destinations that are normally blocked by OpenClaw's policy enforcement. This bypass undermines the intended network segmentation and access controls implemented by OpenClaw.
Potential Impact
Attackers with lower trust levels can exploit this vulnerability to reach internal network resources that should be inaccessible according to OpenClaw's network policies. This could lead to unauthorized access to sensitive internal services or data. The vulnerability compromises network policy enforcement within the sandbox exec-server component.
Mitigation Recommendations
A fix is available in OpenClaw version 2026.6.6. Users should upgrade to version 2026.6.6 or later to remediate this vulnerability. No additional mitigation guidance is provided in the vendor advisory.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-3fh8-p25m-jh6q
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-62201"]
- Database Specific Severity
- MODERATE
- Cvss Version
- 4.0
Threat ID: 6a5a00a091ae9bcd3f7eedad
Added to database: 07/17/2026, 10:14:56 UTC
Last enriched: 09/17/2026, 17:35:24 UTC
Last updated: 10/16/2026, 06:48:18 UTC
Views: 165
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.