# CVE-2026-8629: Openclaw Crabbox privilege escalation in agent ticket endpoints

Source: https://junglewise.ai/threats/cve-2026-8629-openclaw-crabbox-privilege-escalation-in-agent-ticket-endpoints  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-05-14. Updated: 2026-07-14  
License: CC BY 4.0 with a link back

CVE-2026-8629 · Severity: high · CVSS 8.1 · Published 2026-05-14

Crabbox, a platform for managing remote development environments and leases, contains a security flaw where users with limited 'view-only' permissions can gain unauthorized control over active sessions. By exploiting this vulnerability, a low-privileged user can impersonate trusted system components to intercept or manipulate code, web-based remote desktop traffic (WebVNC), and network tunnels. This could lead to the theft of sensitive source code or the hijacking of active development sessions.

Technologies: [Openclaw Crabbox](https://junglewise.ai/threats/technologies/crabbox). Vendors: [Openclaw](https://junglewise.ai/threats/vendors/openclaw).

## Quick answers

**Is CVE-2026-8629 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-8629 being exploited in the wild.

**How severe is CVE-2026-8629?** High severity, with a CVSS score of 8.1, published 14 May 2026.

**Which products and versions are affected?** Openclaw Crabbox < 0.12.0, < v0.12.0.

**Is there a fix for CVE-2026-8629?** A patch was published on 2026-05-11: Fix merged into main branch Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-8629 attacked?** It is attacked over the network, in a hosted service.

**Am I affected by CVE-2026-8629?** Check whether you run Openclaw Crabbox at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A privilege escalation vulnerability exists in Crabbox due to insufficient access control checks in the ticket-minting endpoints. Specifically, the /v1/leases/:id/code/ticket, /v1/leases/:id/webvnc/ticket, and /v1/leases/:id/egress/ticket endpoints used a 'resolveLease' function that only verified lease visibility rather than manageability. An attacker with 'use' (visibility-only) permissions can send a POST request to these endpoints to obtain bridge-agent tickets. These tickets allow the holder to connect to WebSocket routes and impersonate or replace trusted lease-side bridges, effectively gaining control over the lease's code, VNC, or egress traffic. The issue is fixed in version 0.12.0 by requiring owner, manage, or admin access for these endpoints.

## Affected products

- openclaw Crabbox < 0.12.0

## Timeline

- 2026-05-11: patched: Fix merged into main branch
- 2026-05-12: advisory: v0.12.0 release notes published
- 2026-05-14: disclosed: CVE-2026-8629 published

## References

- [https://github.com/openclaw/crabbox/commit/95cb30dc7dbaa1fef690a42ef6ac1cb6e307a191](https://github.com/openclaw/crabbox/commit/95cb30dc7dbaa1fef690a42ef6ac1cb6e307a191)
- [https://github.com/openclaw/crabbox/pull/71](https://github.com/openclaw/crabbox/pull/71)
- [https://github.com/openclaw/crabbox/releases/tag/v0.12.0](https://github.com/openclaw/crabbox/releases/tag/v0.12.0)
- [https://www.vulncheck.com/advisories/crabbox-privilege-escalation-via-agent-ticket-endpoints](https://www.vulncheck.com/advisories/crabbox-privilege-escalation-via-agent-ticket-endpoints)

## Related threats

- [openclaw Crabbox environment variable exposure via wildcard allowlist](https://junglewise.ai/threats/cve-2026-8634-openclaw-crabbox-environment-variable-exposure-via-wildcard)
- [openclaw Crabbox authentication bypass via identity header spoofing](https://junglewise.ai/threats/cve-2026-8621-openclaw-crabbox-authentication-bypass-via-identity-header)
- [openclaw Crabbox path traversal in Islo provider workspace resolution](https://junglewise.ai/threats/cve-2026-45224-openclaw-crabbox-path-traversal-in-islo-provider-workspace)
- [Openclaw Crabbox authentication bypass in coordinator user-token verification](https://junglewise.ai/threats/cve-2026-45223-openclaw-crabbox-authentication-bypass-in-coordinator-user-token)