Container Security

OpenClaw Privilege Escalation Weakens Sandbox Isolation: A New Renewal Question for Cyber Insurers

CVE-2026-43578 (CVSS 9.1) lets unprivileged actors escalate to root in OpenClaw via background-task verification flaws — renewing cyber underwriters should add sandboxed-orchestrator exposure to the renewal file.