OpenClaw versions before 2026.3.31 contain a critical sandbox bypass vulnerability that allows attackers to escalate privileges through heartbeat context inheritance and senderIsOwner parameter manipulation. The vulnerability stems from improper context validation, enabling attackers to bypass sandbox restrictions and achieve unauthorized privilege escalation. This represents a significant security flaw in the OpenClaw application's sandboxing mechanism.