GHSA-h9xm-j4qg-fvpg: OpenClaw: Experimental apply_patch may bypass workspace-only checks in opt-in sandbox mounts (off by default)

March 3, 2026

In some opt-in sandbox configurations, the experimental apply_patch tool did not consistently apply workspace-only checks to mounted paths (for example /agent/...).

References

github.com/advisories/GHSA-h9xm-j4qg-fvpg
github.com/openclaw/openclaw
github.com/openclaw/openclaw/commit/6634030be31e1a1842967df046c2f2e47490e6bf
github.com/openclaw/openclaw/security/advisories/GHSA-h9xm-j4qg-fvpg

Code Behaviors & Features

Detect and mitigate GHSA-h9xm-j4qg-fvpg with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →