| パッケージ | 影響を受けるバージョン | 修正済みバージョン |
|---|---|---|
| openclaw | < 2026.3.11 | 2026.3.11 |
| openclaw | < 2026.3.11 | 2026.3.11 |
The built-in session_status tool did not enforce the intended session-visibility boundary. A sandboxed subagent could supply another session's sessionKey and inspect or modify state outside its own sandbox scope.
This allowed a sandboxed child session to read parent or sibling session data and, in affected releases, update the target session's persisted model override.
openclaw <= 2026.3.8
Fixed in openclaw 2026.3.11 and included in later releases such as 2026.3.12. Session visibility checks now enforce the sandbox boundary before reading or mutating session state.
これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。
無料でサイトをスキャン