GitHub Advisoryadvisory · npm

GHSA-jccr-rrw2-vc8h OpenClaw safeBins jq `$ENV` filter bypass allows environment variable disclosure

HIGH Published 2026-03-31 Modified 2026-04-08 Official page ↗
Ecosystem
npm
Packages
openclaw
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Weaknesses
CWE-185, CWE-200
Reviewed
2026-03-31

Affected packages

• npm openclaw: < 2026.3.28 → fixed in 2026.3.28

Description

Summary The jq safe-bin policy blocked explicit `env` usage but still allowed jq programs that accessed environment data through `$ENV`. Impact An operator-approved safe-bin jq command could disclose environment variables that the safe-bin policy was supposed to keep out of scope. Affected Component `src/infra/exec-safe-bin-semantics.ts` Fixed Versions • Affected: `= 2026.3.28` • Latest stable `2026.3.28` contains the fix. Fix Fixed by commit `78e2f3d66d` (`Exec: tighten jq safe-bin env checks`). Thanks @nicky-cc of Tencent zhuque Lab (https://github.com/Tencent/AI-Infra-Guard) for reporting.

Related

Weakness · CWE (2)

  • CWE-185 Incorrect Regular Expression weakness
  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References