CVE-2026-32038

Publication date

2026-03-19 22:07:12

Family

VulnCheck

State

PUBLISHED

Description

OpenClaw before 2026.2.24 contains a sandbox network isolation bypass vulnerability that allows trusted operators to join another containers network namespace. Attackers can configure the docker.network parameter with container: values to reach services in target container namespaces and bypass network hardening controls.