GitHub Advisoryadvisory · npm

GHSA-hxvm-xjvf-93f3 OpenClaw: Workspace dotenv could override runtime-control environment variables

HIGH Published 2026-04-25 Modified 2026-05-12 Official page ↗
Aliases
CVE-2026-44114
Ecosystem
npm
Packages
openclaw
Severity
High
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-184
Reviewed
2026-04-25

Affected packages

• npm openclaw: < 2026.4.20 → fixed in 2026.4.20

Description

Affected Packages / Versions • Package: `openclaw` (npm) • Affected versions: `< 2026.4.20` • Patched version: `2026.4.20` Impact Workspace `.env` loading did not reserve the `OPENCLAW_` runtime-control namespace broadly enough. A malicious workspace could set variables such as `OPENCLAW_GIT_DIR` before source-update or installer flows, potentially steering trusted OpenClaw runtime behavior. This requires running OpenClaw from an attacker-controlled workspace. Severity is medium. Fix OpenClaw now reserves the workspace `OPENCLAW_` environment namespace and rejects workspace dotenv entries for OpenClaw runtime-control variables. Fix commit: • `018494fa3ebb9145112e68b56fe1cb2e9f9a9ed6` Release Fixed in OpenClaw `2026.4.20`.

Related

Alias · CVE (1)

  • CVE-2026-44114 OpenClaw before 2026.4.20 fails to properly reserve the OPENCLAW_ runtime-control environment namespace in workspace dotenv files, allowing… vulnerability

Weakness · CWE (1)

  • CWE-184 Incomplete List of Disallowed Inputs weakness

References