GitHub Advisoryadvisory · npm

GHSA-8rh7-6779-cjqq OpenClaw has a CWD `.env` environment variable injection which bypasses host-env policy and allows config takeover

CRITICAL Published 2026-04-01 Modified 2026-04-20 Official page ↗
Aliases
CVE-2026-41294
Ecosystem
npm
Packages
openclaw
Severity
Critical
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Weaknesses
CWE-426
Reviewed
2026-04-01

Affected packages

• npm openclaw: < 2026.3.28 → fixed in 2026.3.28

Description

Summary OpenClaw loaded the current working directory `.env` before trusted state-dir configuration, allowing untrusted workspace state to inject host environment values. Impact A repository or workspace containing a malicious `.env` file could override runtime configuration and security-sensitive environment settings when OpenClaw started there. Affected Component `src/infra/dotenv.ts, src/cli/dotenv.ts` Fixed Versions • Affected: `= 2026.3.28` • Latest stable `2026.3.28` contains the fix. Fix Fixed by commit `6a79324802` (`Filter untrusted CWD .env entries before OpenClaw startup`).

Related

Alias · CVE (1)

  • CVE-2026-41294 OpenClaw before 2026.3.28 loads the current working directory .env file before trusted state-dir configuration, allowing environment… vulnerability

Weakness · CWE (1)

  • CWE-426 Untrusted Search Path weakness

References