OpenClaw versions from 2026.4.5 up to but not including 2026.4.10 contain a vulnerability allowing sandboxed agents to bypass sandbox execution routing by overriding the host parameter to 'node'. This flaw enables execution routing to a remote node instead of the intended sandbox, violating sandbox boundaries. The issue is fixed in version 2026.4.10 and later.