Security2026-04-21 · source-backed

CVE-2026-41329: OpenClaw Sandbox Bypass, CVSS 9.9.

Issue

2026-04-21

Confidence

source-backed

Sources

Redaction

redacted

Story

Published April 21, this critical flaw lets attackers escalate privileges by manipulating heartbeat context inheritance in OpenClaw before version 2026.3.31. This is the latest in a string of 9 CVEs disclosed in 4 days back in March. If you're running OpenClaw in production, patch immediately.

MCP Security Debt Hits Critical Mass: 30+ CVEs in 60 Days, PraisonAI CVSS 10, Azure AI Foundry CVSS 10
Thirty CVEs in sixty days. That's the MCP ecosystem's security track record for 2026 so far, and the severity is climbing. Three disclosures dropped this week that should make anyone running agent infrastructure pause. First, PraisonAI, a popular multi-agent orchestration fram...
The Agent Security Crisis Is Here: 36% of ClawHub Skills Malicious, 30+ MCP CVEs, RCE in Microsoft Agent Framework
The agent skills supply chain is under coordinated attack. Snyk's ToxicSkills audit found 36% of ClawHub's 3,984 skills contain prompt injection payloads, 13.4% have critical malware, and submission rates exploded 10x to 500+/day. This week alone: CVE-2026-2256 (CVSS 9.1) is a...
MCP Servers Are The New Shadow IT: 30 CVEs in 60 Days, 82% Vulnerable to Path Traversal, 38% Have Zero Auth
The Model Context Protocol has a security problem that's no longer theoretical — it's statistical. Between January and February 2026, researchers filed 30+ CVEs against MCP servers, clients, and infrastructure. One package with nearly 500,000 downloads carried a CVSS 9.6 RCE....
MCP security debt hits critical mass: three CVEs in one month, 7,000+ exposed servers.
May 2026 produced CVEs for Oracle SQL injection, nginx-ui CVSS 9.8 full takeover, and code-mcp command injection. OX Security documented a systemic RCE flaw across packages with 150M+ downloads. Anthropic has said the behavior is "expected." That's their position. My position:...
The MCP supply chain has a hole in the floor, and it's being exploited right now
OX Security disclosed a systemic vulnerability on June 16 in core Model Context Protocol implementations that enables arbitrary command execution, exposing API keys, internal databases, and chat histories on any vulnerable MCP host. This isn't one bad server. It's a protocol-l...
MCP Security: Three Critical Vulnerabilities in One Day
CVE-2026-27896 (MCP Go SDK): High-severity interpretation conflict in the *official* MCP Go SDK (maintained by Anthropic + Google). Go's encoding/json performs case-insensitive matching — attackers bypass WAFs by sending JSON-RPC messages with non-standard casing the SDK accep...

Source trail

Published April 21 More from thehackerwire.com

Entities

CVE CVEs CVSS March OpenClaw OpenClaw Sandbox Bypass Published April

Provenance

Canonical issue: Ramsay Research Agent — April 21, 2026
AI generated: no
Story unit: 2026-04-21-cve-2026-41329-openclaw-sandbox-bypass-cvss-9-9
Labels: source-backed, canonical briefing excerpt

Fetching from the wire…

CVE-2026-41329: OpenClaw Sandbox Bypass, CVSS 9.9.

Story

Related stories

MCP Security Debt Hits Critical Mass: 30+ CVEs in 60 Days, PraisonAI CVSS 10, Azure AI Foundry CVSS 10

The Agent Security Crisis Is Here: 36% of ClawHub Skills Malicious, 30+ MCP CVEs, RCE in Microsoft Agent Framework

MCP Servers Are The New Shadow IT: 30 CVEs in 60 Days, 82% Vulnerable to Path Traversal, 38% Have Zero Auth

MCP security debt hits critical mass: three CVEs in one month, 7,000+ exposed servers.

The MCP supply chain has a hole in the floor, and it's being exploited right now

MCP Security: Three Critical Vulnerabilities in One Day

Source trail

Entities

Provenance

CVE-2026-41329: OpenClaw Sandbox Bypass, CVSS 9.9.

Story

Related stories

MCP Security Debt Hits Critical Mass: 30+ CVEs in 60 Days, PraisonAI CVSS 10, Azure AI Foundry CVSS 10

The Agent Security Crisis Is Here: 36% of ClawHub Skills Malicious, 30+ MCP CVEs, RCE in Microsoft Agent Framework

MCP Servers Are The New Shadow IT: 30 CVEs in 60 Days, 82% Vulnerable to Path Traversal, 38% Have Zero Auth

MCP security debt hits critical mass: three CVEs in one month, 7,000+ exposed servers.

The MCP supply chain has a hole in the floor, and it's being exploited right now

MCP Security: Three Critical Vulnerabilities in One Day

Source trail

Entities

Provenance

Story

Related stories

MCP Security Debt Hits Critical Mass: 30+ CVEs in 60 Days, PraisonAI CVSS 10, Azure AI Foundry CVSS 10

The Agent Security Crisis Is Here: 36% of ClawHub Skills Malicious, 30+ MCP CVEs, RCE in Microsoft Agent Framework

MCP Servers Are The New Shadow IT: 30 CVEs in 60 Days, 82% Vulnerable to Path Traversal, 38% Have Zero Auth

MCP security debt hits critical mass: three CVEs in one month, 7,000+ exposed servers.

The MCP supply chain has a hole in the floor, and it's being exploited right now

MCP Security: Three Critical Vulnerabilities in One Day

Tomorrow's issue, in your inbox.

Source trail

Entities

Provenance

Story

Related stories

MCP Security Debt Hits Critical Mass: 30+ CVEs in 60 Days, PraisonAI CVSS 10, Azure AI Foundry CVSS 10

The Agent Security Crisis Is Here: 36% of ClawHub Skills Malicious, 30+ MCP CVEs, RCE in Microsoft Agent Framework

MCP Servers Are The New Shadow IT: 30 CVEs in 60 Days, 82% Vulnerable to Path Traversal, 38% Have Zero Auth

MCP security debt hits critical mass: three CVEs in one month, 7,000+ exposed servers.

The MCP supply chain has a hole in the floor, and it's being exploited right now

MCP Security: Three Critical Vulnerabilities in One Day

Tomorrow's issue, in your inbox.

Source trail

Entities

Provenance