CVE-2026-32920 | OpenClaw up to 2026.3.11 Workspace OpenClaw/extensions/ inclusion of functionality from untrusted control sphere (GHSA-99qw-6mr3-36qr)

March 31, 2026 Yanac

A vulnerability was found in OpenClaw up to 2026.3.11. It has been declared as problematic. This impacts an unknown function of the file OpenClaw/extensions/ of the component Workspace Handler. Such manipulation leads to inclusion of functionality from untrusted control sphere.

This vulnerability is traded as CVE-2026-32920. An attack has to be approached locally. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More