GitHub Advisoryadvisory · npm

GHSA-h2vw-ph2c-jvwf OpenClaw: Workspace dotenv MiniMax host override could redirect credentialed requests

MEDIUM Published 2026-04-25 Modified 2026-05-19 Official page ↗
Aliases
CVE-2026-44992
Ecosystem
npm
Packages
openclaw
Severity
Moderate
CVSS vector
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
Weaknesses
CWE-15, CWE-522
Reviewed
2026-04-25

Affected packages

• npm openclaw: >= 2026.4.5, < 2026.4.20 → fixed in 2026.4.20

Description

Affected Packages / Versions • Package: `openclaw` (npm) • Affected versions: `>= 2026.4.5, < 2026.4.20` • Patched version: `2026.4.20` Impact A malicious workspace `.env` could set `MINIMAX_API_HOST` and redirect credentialed MiniMax requests to an attacker-controlled origin, exposing the MiniMax API key in the outbound `Authorization` header. This requires running OpenClaw from an attacker-controlled workspace. Severity is medium. Fix OpenClaw now blocks `MINIMAX_API_HOST` from workspace dotenv injection and removes env-driven URL routing from the affected MiniMax request path. Fix commit: • `2f06696579a1ab0cb5bbbbb6a900414a6b2e3cd1` Release Fixed in OpenClaw `2026.4.20`.

Related

Alias · CVE (1)

  • CVE-2026-44992 OpenClaw versions 2026.4.5 before 2026.4.20 contain an environment variable injection vulnerability allowing workspace dotenv to override… vulnerability

Weakness · CWE (2)

  • CWE-15 External Control of System or Configuration Setting weakness
  • CWE-522 Insufficiently Protected Credentials weakness

References