CVE-2026-44997: OpenClaw < 2026.4.22 - Security Envelope Constraint Bypass in ACP Child Sessions

Published May 11, 2026
·
Updated

OpenClaw before 2026.4.22 contains a security envelope constraint bypass vulnerability allowing restricted subagents to spawn ACP child sessions that fail to inherit depth, child-count limits, control scope, or target-agent restrictions. Attackers can exploit this by spawning child sessions that bypass subagent-only constraints, potentially escalating privileges or accessing restricted resources.

Affected Software

2 affected components
OpenClaw OpenClaw<2026.4.22
OpenClaw Openclaw Node.js<2026.4.22

Event History

May 11, 2026
CVE Published
via MITRE·04:46 PM
Data Sourced
via MITRE·04:46 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:16 PM
RemedyDescriptionSeverityWeaknessAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2026-44997?

CVE-2026-44997 has been classified as a significant security risk due to its capacity to bypass critical envelope constraints in child sessions.

2

How do I fix CVE-2026-44997?

To mitigate CVE-2026-44997, upgrade OpenClaw to version 2026.4.22 or later.

3

What types of systems are affected by CVE-2026-44997?

CVE-2026-44997 affects OpenClaw versions prior to 2026.4.22 running on Node.js environments.

4

What impacts can occur if CVE-2026-44997 is exploited?

Exploitation of CVE-2026-44997 could allow unauthorized subagents to create ACP child sessions with insufficient restrictions.

5

Is there a way to detect CVE-2026-44997 in my environment?

To detect CVE-2026-44997, check for versions of OpenClaw that are below 2026.4.22 and review session configurations for vulnerabilities.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203