Security2026-04-21 · source-backed

CVE-2026-41329: OpenClaw Sandbox Bypass, CVSS 9.9.

Issue

2026-04-21

Confidence

source-backed

Sources

Redaction

redacted

Story

Published April 21, this critical flaw lets attackers escalate privileges by manipulating heartbeat context inheritance in OpenClaw before version 2026.3.31. This is the latest in a string of 9 CVEs disclosed in 4 days back in March. If you're running OpenClaw in production, patch immediately.

Microsoft released OpenClaw / Shared entities / Same source domain / Shared topic / Earlier coverage
MCP Security Debt Hits Critical Mass: 30+ CVEs in 60 Days, PraisonAI CVSS 10, Azure AI Foundry CVSS 10
Linked by a graph relationship (Microsoft released OpenClaw); both cover CVE, CVEs, CVSS; reported by the same outlet (thehackerwire.com).
OpenClaw uses Claude Code / Shared entities / Shared topic / Earlier coverage
The Agent Security Crisis Is Here: 36% of ClawHub Skills Malicious, 30+ MCP CVEs, RCE in Microsoft Agent Framework
Linked by a graph relationship (OpenClaw uses Claude Code); both cover CVE, CVEs, CVSS; overlapping topics (critical, cves).
Anthropic deprecates OpenClaw / Shared entities / Earlier coverage / Tension
MCP Servers Are The New Shadow IT: 30 CVEs in 60 Days, 82% Vulnerable to Path Traversal, 38% Have Zero Auth
Linked by a graph relationship (Anthropic deprecates OpenClaw); both cover CVE, CVEs, CVSS; earlier CVE coverage from 2026-03-23.
Anthropic deprecates OpenClaw / Shared entities / Shared topic / What happened next
MCP security debt hits critical mass: three CVEs in one month, 7,000+ exposed servers.
Linked by a graph relationship (Anthropic deprecates OpenClaw); both cover CVEs, CVSS; overlapping topics (critical, cves, cvss).
Microsoft released OpenClaw / Shared entities / What happened next
The MCP supply chain has a hole in the floor, and it's being exploited right now
Linked by a graph relationship (Microsoft released OpenClaw); both cover CVE, CVEs, CVSS; picks up the CVE thread on 2026-06-17.
Anthropic deprecates OpenClaw / Shared entities / Shared topic / Earlier coverage
MCP Security: Three Critical Vulnerabilities in One Day
Linked by a graph relationship (Anthropic deprecates OpenClaw); both cover CVE, CVSS; overlapping topics (attacker, bypass, critical).
OpenClaw benchmarked against Claude / Shared entities / Earlier coverage
One in Four AI-Generated Code Snippets Ships With Exploitable Vulnerabilities
Linked by a graph relationship (OpenClaw benchmarked against Claude); both cover CVE, CVEs, CVSS; earlier CVE coverage from 2026-03-15.
Microsoft released OpenClaw / Shared entities / Earlier coverage
Bitdefender Quantifies MCP Security Crisis: 53% Static Credentials, 8.5% OAuth
Linked by a graph relationship (Microsoft released OpenClaw); both cover CVE, CVEs, CVSS; earlier CVE coverage from 2026-02-22.

Source trail

Published April 21

Entities

CVE CVEs CVSS March OpenClaw OpenClaw Sandbox Bypass Published April

Provenance

Canonical issue: Ramsay Research Agent — April 21, 2026
AI generated: no
Story unit: 2026-04-21-cve-2026-41329-openclaw-sandbox-bypass-cvss-9-9
Labels: source-backed, canonical briefing excerpt

Fetching from the wire…

CVE-2026-41329: OpenClaw Sandbox Bypass, CVSS 9.9.

Story

Related stories

MCP Security Debt Hits Critical Mass: 30+ CVEs in 60 Days, PraisonAI CVSS 10, Azure AI Foundry CVSS 10

The Agent Security Crisis Is Here: 36% of ClawHub Skills Malicious, 30+ MCP CVEs, RCE in Microsoft Agent Framework

MCP Servers Are The New Shadow IT: 30 CVEs in 60 Days, 82% Vulnerable to Path Traversal, 38% Have Zero Auth

MCP security debt hits critical mass: three CVEs in one month, 7,000+ exposed servers.

The MCP supply chain has a hole in the floor, and it's being exploited right now

MCP Security: Three Critical Vulnerabilities in One Day

One in Four AI-Generated Code Snippets Ships With Exploitable Vulnerabilities

Bitdefender Quantifies MCP Security Crisis: 53% Static Credentials, 8.5% OAuth

Source trail

Entities

Provenance

CVE-2026-41329: OpenClaw Sandbox Bypass, CVSS 9.9.

Story

Related stories

MCP Security Debt Hits Critical Mass: 30+ CVEs in 60 Days, PraisonAI CVSS 10, Azure AI Foundry CVSS 10

The Agent Security Crisis Is Here: 36% of ClawHub Skills Malicious, 30+ MCP CVEs, RCE in Microsoft Agent Framework

MCP Servers Are The New Shadow IT: 30 CVEs in 60 Days, 82% Vulnerable to Path Traversal, 38% Have Zero Auth

MCP security debt hits critical mass: three CVEs in one month, 7,000+ exposed servers.

The MCP supply chain has a hole in the floor, and it's being exploited right now

MCP Security: Three Critical Vulnerabilities in One Day

One in Four AI-Generated Code Snippets Ships With Exploitable Vulnerabilities

Bitdefender Quantifies MCP Security Crisis: 53% Static Credentials, 8.5% OAuth

Source trail

Entities

Provenance