CVE-2026-28479: OpenClaw < 2026.2.15 - Cache Poisoning via Deprecated SHA-1 Hash in Sandbox Configuration
OpenClaw versions prior to 2026.2.15 use SHA-1 to hash sandbox identifier cache keys for Docker and browser sandbox configurations, which is deprecated and vulnerable to collision attacks. An attacker can exploit SHA-1 collisions to cause cache poisoning, allowing one sandbox configuration to be misinterpreted as another and enabling unsafe sandbox state reuse.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-28479?
CVE-2026-28479 is classified as a medium severity vulnerability due to its potential for cache poisoning attacks.
How do I fix CVE-2026-28479?
To remediate CVE-2026-28479, upgrade OpenClaw to version 2026.2.15 or later.
What type of attack does CVE-2026-28479 enable?
CVE-2026-28479 enables collision attacks through cache poisoning due to the use of the deprecated SHA-1 hash.
Which versions of OpenClaw are affected by CVE-2026-28479?
OpenClaw versions prior to 2026.2.15 are affected by CVE-2026-28479.
What configurations are vulnerable in CVE-2026-28479?
The vulnerability in CVE-2026-28479 affects the Docker and browser sandbox configurations using SHA-1 hashing.