GitHub Advisoryadvisory · npm
GHSA-7437-7hg8-frrw OpenClaw: HGRCPATH, CARGO_BUILD_RUSTC_WRAPPER, RUSTC_WRAPPER, and MAKEFLAGS missing from exec env denylist — RCE via build tool env injection (GHSA-cm8v-2vh9-cxf3 class)
HIGH
Official page ↗
- Aliases
- CVE-2026-42427
- Ecosystem
- npm
- Packages
- openclaw
- Severity
- High
- CVSS vector
- CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
- Weaknesses
- CWE-184, CWE-78
- Reviewed
- 2026-04-09
Affected packages
• npm openclaw: < 2026.4.8 → fixed in 2026.4.8
Description
Impact
HGRCPATH, CARGO_BUILD_RUSTC_WRAPPER, RUSTC_WRAPPER, and MAKEFLAGS missing from exec env denylist — RCE via build tool env injection (GHSA-cm8v-2vh9-cxf3 class).
Missing denylist entries allowed hostile build-tool environment variables to influence host exec commands.
OpenClaw is a user-controlled local assistant. This advisory is scoped to the OpenClaw trust model and does not assume a multi-tenant service boundary.
Affected Packages / Versions
• Package: `openclaw` (npm)
• Affected versions: `< 2026.4.8`
• Patched versions: `2026.4.8`
Fix
The issue was fixed on `main` and is available in the patched npm version listed above. The verified fixed tree is commit `d7c3210cd6f5fdfdc1beff4c9541673e814354d5`.
Verification
The fix was re-checked against `main` before publication, including targeted regression tests for the affected security boundary.
Credits
Thanks @boy-hack of Tencent zhuque Lab (https://github.com/Tencent/AI-Infra-Guard) for reporting.
Related
Alias · CVE (1)
- CVE-2026-42427 OpenClaw before 2026.4.8 contains a remote code execution vulnerability caused by missing environment variable denylist entries for… vulnerability