GitHub Advisoryadvisory · npm

GHSA-82g8-464f-2mv7 OpenClaw: Skill env override host env injection via applySkillConfigEnvOverrides (defense-in-depth)

MEDIUM Published 2026-02-27 Modified 2026-03-12 Official page ↗
Aliases
CVE-2026-4039
Ecosystem
npm
Packages
openclaw
Severity
Moderate
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Weaknesses
CWE-1341, CWE-15, CWE-94
Reviewed
2026-02-27

Affected packages

• npm openclaw: < 2026.2.21 → fixed in 2026.2.21

Description

Summary `applySkillConfigEnvOverrides` previously copied `skills.entries.*.env` values into the host `process.env` without applying the host env safety policy. Impact In affected versions, dangerous process-level variables such as `NODE_OPTIONS` could be injected when unset, which can influence runtime/child-process behavior. Required attacker capability An attacker must be able to modify OpenClaw local state/config (for example `~/.openclaw/openclaw.json`) to set `skills.entries..env` or related skill config values. Remediation Fixed in `2026.2.21` by sanitizing skill env overrides and blocking dangerous host env keys (including `NODE_OPTIONS`) before applying overrides, with regression tests covering blocked dangerous keys. Fix Commit(s) • `8c9f35cdb51692b650ddf05b259ccdd75cc9a83c` Found using MCPwner

Related

Alias · CVE (1)

  • CVE-2026-4039 A vulnerability was determined in OpenClaw 2026.2.19-2. vulnerability

Weakness · CWE (3)

  • CWE-1341 Multiple Releases of Same Resource or Handle weakness
  • CWE-15 External Control of System or Configuration Setting weakness
  • CWE-94 Improper Control of Generation of Code weakness

References