CyberRota Analysis
AI-GeneratedOpenClaw versions prior to 2026.6.6 are susceptible to a network policy bypass vulnerability in the sandbox exec-server, enabling lower-trust callers to access internal network destinations that should be restricted. This flaw allows attackers to send HTTP requests through the exec-server, potentially compromising sensitive network resources. Organizations using affected versions should prioritize immediate updates to mitigate the risk of unauthorized access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
OpenClaw versions before 2026.6.6 contain a network policy bypass vulnerability in the sandbox exec-server that allows lower-trust callers to reach internal network destinations blocked by OpenClaw policy. Attackers can send HTTP requests through the exec-server to access network resources that should have been restricted by configured policies.
Related CVEs
Other vulnerabilities affecting the same vendor(s)