CVE-2026-32038

OpenClaw before 2026.2.24 contains a sandbox network isolation bypass vulnerability that allows trusted operators to join another container’s network namespace. Attackers can configure the docker.network parameter with container: values to reach services in target container namespaces and bypass network hardening controls.

More information : https://github.com/openclaw/openclaw/security/advisories/GHSA-ww6v-v748-x7g9