Security Envelope Constraint Bypass in OpenClaw by OpenClaw

CVE-2026-44997

What is CVE-2026-44997?

OpenClaw versions prior to 2026.4.22 are susceptible to a security envelope constraint bypass vulnerability. This flaw allows restricted subagents to create ACP child sessions that do not adhere to existing depth, child-count, control scope, or target-agent limits. Malicious actors could exploit this vulnerability to generate unauthorized child sessions, potentially facilitating privilege escalation or providing access to sensitive resources that should be restricted.

References