sbomify Insights

Search by CVE or GitHub advisory id, package name or title.

CVE-2026-44997 OpenClaw < 2026.4.22 - Security Envelope Constraint Bypass in ACP Child Sessions

Low 2.3 Published Updated

Attackers can bypass security constraints in OpenClaw to spawn unrestricted child sessions, leading to privilege escalation and access to restricted resources.

Exploited in the wild
Not known
Login needed
Any signed-in user
Attackable
Over the internet
Victim action needed
Not needed
Fix
Available

What is CVE-2026-44997?

CVE-2026-44997 is a low-severity vulnerability in Openclaw Openclaw, published on 11 May 2026. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

OpenClaw before 2026.4.22 contains a security envelope constraint bypass vulnerability allowing restricted subagents to spawn ACP child sessions that fail to inherit depth, child-count limits, control scope, or target-agent restrictions. Attackers can exploit this by spawning child sessions that bypass subagent-only constraints, potentially escalating privileges or accessing restricted resources.

Weakness: CWE-266

Which versions are affected by CVE-2026-44997?

2 open source packages ship an affected version, including openclaw. It affects 1 product.

PackageAffectedFixed in
openclaw npmAll versions2026.4.22
openclaw npmAll versions2026.4.22

Products include Openclaw Openclaw.

How do I fix CVE-2026-44997?

Upgrade openclaw to 2026.4.22 or later.

Is CVE-2026-44997 being exploited?

There is no known exploitation of CVE-2026-44997 in the wild and no public exploit code.

All Openclaw Openclaw vulnerabilities

Sources

Also known as GHSA-q3jj-46pq-826r, MINI-38vx-4wfc-vq75, MINI-5wpm-p8p7-9w92.

Is CVE-2026-44997 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free