What is GHSA-52f4-h455-6w3r?

GHSA-52f4-h455-6w3r is a security advisory published by GitHub Security Advisories with Low severity. OpenClaw before 2026.4.26 contains an information disclosure vulnerability in sandboxed session...

Which CVE IDs does GHSA-52f4-h455-6w3r cover?

GHSA-52f4-h455-6w3r covers the following CVE IDs: CVE-2026-53826. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-52f4-h455-6w3r?

GHSA-52f4-h455-6w3r has a CVSS v3 base score of 4.3, published by GitHub Security Advisories.

GHSA-52f4-h455-6w3rLowCVSS 4.3

OpenClaw before 2026.4.26 contains an information disclosure vulnerability in sandboxed session...

Vendor

GitHub Security Advisories

Published

June 13, 2026

Last Modified

June 13, 2026

🔗 CVE IDs covered (1)

CVE-2026-53826 →

📋 Description

OpenClaw before 2026.4.26 contains an information disclosure vulnerability in sandboxed session spawning that exposes the real workspace path to child prompts. Attackers can exploit this by spawning child sessions from sandboxed parents to reveal host workspace location or related memory context to child models.

🔗 References (4)

https://github.com/openclaw/openclaw/security/advisories/GHSA-6c4r-g249-wv3c
https://nvd.nist.gov/vuln/detail/CVE-2026-53826
https://www.vulncheck.com/advisories/openclaw-information-disclosure-via-sandboxed-session-spawn
https://github.com/advisories/GHSA-52f4-h455-6w3r