5.4

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-fh3f-q9qw-93j9

GHSA-fh3f-q9qw-93j9: OpenClaw replaced a deprecated sandbox hash algorithm

Affected Packages / Versions

npm package: openclaw
Affected versions: <= 2026.2.14
Fixed version (pre-set): 2026.2.15

Description

The sandbox identifier cache key for Docker/browser sandbox configuration used SHA-1 to hash normalized configuration payloads.

SHA-1 is deprecated for cryptographic use and has known collision weaknesses. In this code path, deterministic IDs are used to decide whether an existing sandbox container can be reused safely. A collision in this hash could let one configuration be interpreted as another under the same sandbox cache identity, increasing the risk of cache poisoning and unsafe sandbox state reuse.

The implementation now uses SHA-256 for these deterministic hashes to restore collision resistance for this security-relevant identifier path.

Fix Commit(s)

559c8d993

Release Process Note

patched_versions is pre-set to 2026.2.15 for the next release. After that release is published, mark this advisory ready for publication.

Thanks @kexinoh ( of Tencent zhuque Lab, by https://github.com/Tencent/AI-Infra-Guard) for reporting.

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-fh3f-q9qw-93j9

GHSA-fh3f-q9qw-93j9:

5.4

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	<= 2026.2.14	2026.2.15

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability lies in the use of the deprecated SHA-1 hashing algorithm for generating sandbox configuration cache keys. The patch replaces SHA-1 with SHA-256 to mitigate the risk of hash collisions. The core of the vulnerability is in the computeHash function in src/agents/sandbox/config-hash.ts. This function is called by other exported functions, such as computeSandboxBrowserConfigHash, to generate the cache keys. The vulnerability description also mentions 'Docker/browser sandbox configuration', which strongly suggests the existence of a corresponding computeSandboxDockerConfigHash function that would also be affected. An attacker could exploit this vulnerability by crafting a sandbox configuration that results in a hash collision, leading to cache poisoning and the reuse of an unsafe sandbox state.

Vulnerable functions

computeHash

src/agents/sandbox/config-hash.ts

The function `computeHash` uses the deprecated SHA-1 algorithm to create a hash. SHA-1 is known to have collision weaknesses, which could allow an attacker to create a hash collision, leading to cache poisoning and unsafe sandbox state reuse.

computeSandboxBrowserConfigHash

src/agents/sandbox/config-hash.ts

This function is responsible for generating a hash for the browser sandbox configuration. It calls the vulnerable `computeHash` function, which uses the weak SHA-1 algorithm. A hash collision could lead to the reuse of an incorrect sandbox, potentially leading to information disclosure or other security issues.

computeSandboxDockerConfigHash

src/agents/sandbox/config-hash.ts

This function is likely responsible for generating a hash for the Docker sandbox configuration. It is assumed to call the vulnerable `computeHash` function, which uses the weak SHA-1 algorithm. A hash collision could lead to the reuse of an incorrect sandbox, potentially leading to container escape or other security issues.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.

5.4

-

Basic Information

Basic Information

Concerned about an active attack path?

GHSA-fh3f-q9qw-93j9: OpenClaw replaced a deprecated sandbox hash algorithm

Affected Packages / Versions

Description

Fix Commit(s)

Release Process Note

GHSA-fh3f-q9qw-93j9:

5.4

-

Basic Information

Basic Information

Is this CVE running in your environment?

Technical Details

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Vulnerability IntelligenceMiggo AI

Unlock WAF rules for this CVE

WAF Protection Rules

WAF Rule

Reasoning

Technical Details

5.4

5.4

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Basic Information

Basic Information

GHSA-fh3f-q9qw-93j9: OpenClaw replaced a deprecated sandbox hash algorithm

Affected Packages / Versions

Description

Fix Commit(s)

Release Process Note

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI