GHSA-2rqg-gjgv-84jm: OpenClaw: Gateway `agent` calls could override the workspace boundary

March 13, 2026

The public gateway agent RPC allowed an authenticated operator with operator.write to supply attacker-controlled spawnedBy and workspaceDir values. That let the caller re-root the agent run outside its configured workspace boundary.

References

github.com/advisories/GHSA-2rqg-gjgv-84jm
github.com/openclaw/openclaw
github.com/openclaw/openclaw/releases/tag/v2026.3.11
github.com/openclaw/openclaw/security/advisories/GHSA-2rqg-gjgv-84jm

Code Behaviors & Features

Detect and mitigate GHSA-2rqg-gjgv-84jm with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →