GHSA-2qj5-gwg2-xwc4 OpenClaw: Unsanitized CWD path injection into LLM prompts

• npm openclaw: < 2026.2.15 → fixed in 2026.2.15

Overview OpenClaw embedded the current working directory (workspace path) into the agent system prompt without sanitization. If an attacker can cause OpenClaw to run inside a directory whose name contains control/format characters (for example newlines or Unicode bidi/zero-width markers), those characters could break the prompt structure and inject attacker-controlled instructions. Impact Prompt injection may alter agent behavior and could lead to unintended tool use or disclosure of sensitive information. Affected Packages / Versions • Package: `openclaw` (npm) • Vulnerable versions: `= 2026.2.15` Fix The workspace path is now sanitized before it is embedded into any LLM prompt output, stripping Unicode control/format characters and explicit line/paragraph separators. Workspace path resolution also applies the same sanitization as defense-in-depth. Fix Commit(s) • `6254e96acf16e70ceccc8f9b2abecee44d606f79` Thanks @aether-ai-agent for reporting.