---
id: CVE-2026-100573
title: >-
  OpenClaw versions before 2026.8.1 contain a sandbox policy bypass
  vulnerability in the MCP loopback component that allows sandboxed coding-agent
  sessions to invoke tools explicitly denied by sandbox.tools.deny policy
summary: >-
  OpenClaw versions before 2026.8.1 contain a sandbox policy bypass
  vulnerability in the MCP loopback component that allows sandboxed coding-agent
  sessions to invoke tools explicitly denied by sandbox.tools.deny policy.
  Attackers can list …
severity: low
cvss: 3.3
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N'
cwe:
  - CWE-862
vendor: OpenClaw
product: OpenClaw
affected:
  - OpenClaw < 2026.8.1
published: '2026-09-26'
updated: '2026-09-26'
sourceUpdated: '2026-09-26T03:17:04.743'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-100573'
references:
  - url: >-
      https://github.com/openclaw/openclaw/security/advisories/GHSA-5m4g-88rg-69pj
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/openclaw-before-2026.8.1-sandbox-policy-bypass-via-mcp-loopback
    label: disclosure@vulncheck.com
tags:
  - nvd
  - cve.org
ingestedAt: '2026-09-26T03:25:24.689Z'
---

## Overview

OpenClaw versions before 2026.8.1 contain a sandbox policy bypass vulnerability in the MCP loopback component that allows sandboxed coding-agent sessions to invoke tools explicitly denied by sandbox.tools.deny policy. Attackers can list and invoke denied tools to access data or perform actions the operator intended to exclude from the sandbox.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.