GitHub Advisoryadvisory · npm

GHSA-vfw7-6rhc-6xxg OpenClaw Has Incomplete Fix for CVE-2026-4039: CLI Backend Environment Variable Injection via Workspace Config

HIGH Published 2026-04-07 Modified 2026-05-06 Official page ↗
Aliases
CVE-2026-41384
Ecosystem
npm
Packages
openclaw
Severity
High
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-15, CWE-426
Reviewed
2026-04-07

Affected packages

• npm openclaw: < 2026.3.24 → fixed in 2026.3.24

Description

Summary Incomplete Fix for CVE-2026-4039: CLI Backend Environment Variable Injection via Workspace Config Current Maintainer Triage • Status: open • Normalized severity: high • Assessment: Real shipped malicious-workspace-config env injection in the CLI backend runner, fixed by sanitizing backend env before spawn and shipped in v2026.3.24, so advisory stays open until published. Affected Packages / Versions • Package: `openclaw` (npm) • Latest published npm version: `2026.3.31` • Vulnerable version range: `= 2026.3.24` • First stable tag containing the fix: `v2026.3.24` Fix Commit(s) • `c2fb7f1948c3226732a630256b5179a60664ec24` — 2026-03-24T12:58:10-07:00 Release Process Note • The fix is already present in released version `2026.3.24`. • This draft looks ready for final maintainer disposition or publication, not additional code-fix work. Thanks @YLChen-007 for reporting.

Related

Alias · CVE (1)

  • CVE-2026-41384 OpenClaw before 2026.3.24 contains an environment variable injection vulnerability in the CLI backend runner that allows attackers to… vulnerability

Weakness · CWE (2)

  • CWE-15 External Control of System or Configuration Setting weakness
  • CWE-426 Untrusted Search Path weakness

References