8.7

CVSS Score

4.0

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-42434

CVE-2026-42434: OpenClaw 2026.4.5 < 2026.4.10 - Sandbox Escape via host Parameter Override in Exec Routing

OpenClaw versions 2026.4.5 before 2026.4.10 contain a sandbox escape vulnerability allowing sandboxed agents to override exec routing by specifying host=node. Attackers can bypass sandbox boundaries and route execution to remote nodes instead of intended sandbox paths.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-42434

CVE-2026-42434:

8.7

CVSS Score

4.0

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	>= 2026.4.5, < 2026.4.10	2026.4.10

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability lies in the logic that determines whether an agent can execute commands on a specific host. When an agent is in a sandboxed environment, it should be restricted to executing commands within that sandbox. However, the code did not properly check for a request to use the 'node' host when a sandbox was active. This allowed a sandboxed agent to explicitly request host: 'node' and bypass the sandbox, executing commands on the underlying host machine.

The patch addresses this by modifying three key functions:

isRequestedExecTargetAllowed: This function is updated to explicitly deny requests for the 'node' host when a sandbox is available.
canExecRequestNode: This function is updated to consider the sandbox availability when determining if a 'node' host can be requested.
resolveExecDefaults: This function is updated to correctly pass the sandbox availability status to isRequestedExecTargetAllowed.

By fixing these functions, the system now correctly prevents sandboxed agents from escaping their restricted environment.

Vulnerable functions

isRequestedExecTargetAllowed

src/agents/bash-tools.exec-runtime.ts

The original function did not check for `requestedTarget === 'node'` when a sandbox was available, allowing a sandboxed agent to bypass the sandbox by requesting to execute on the 'node' host.

canExecRequestNode

src/agents/exec-defaults.ts

The original function did not consider the sandbox availability when checking if a 'node' host can be requested. This allowed a sandboxed agent to get approval to use the 'node' host, leading to a sandbox escape.

resolveExecDefaults

src/agents/exec-defaults.ts

The original function did not pass the `sandboxAvailable` flag to `isRequestedExecTargetAllowed` when determining if the 'node' host could be requested. This resulted in the `canRequestNode` property being incorrectly set to true, even when in a sandboxed environment.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.