| Package | Affected versions | Patched versions |
|---|---|---|
| openclaw | < 2026.2.15 | 2026.2.15 |
| openclaw | < 2026.2.15 | 2026.2.15 |
openclaw<= 2026.2.142026.2.15The sandbox identifier cache key for Docker/browser sandbox configuration used SHA-1 to hash normalized configuration payloads.
SHA-1 is deprecated for cryptographic use and has known collision weaknesses. In this code path, deterministic IDs are used to decide whether an existing sandbox container can be reused safely. A collision in this hash could let one configuration be interpreted as another under the same sandbox cache identity, increasing the risk of cache poisoning and unsafe sandbox state reuse.
The implementation now uses SHA-256 for these deterministic hashes to restore collision resistance for this security-relevant identifier path.
559c8d993patched_versions is pre-set to 2026.2.15 for the next release. After that release is published, mark this advisory ready for publication.
Thanks @kexinoh ( of Tencent zhuque Lab, by https://github.com/Tencent/AI-Infra-Guard) for reporting.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free