Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.9
OpenClaw Inherit Environment Variables from User Control
published 6 months ago
Summary
The OpenClaw local assistant may inherit environment variables from users, potentially influencing how it executes certain tools or scripts. This could lead to unintended behavior or security issues. To fix this, update to OpenClaw version 2026.4.8 or later.
What to do
- Update steipete openclaw to version 2026.4.8.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| npm | steipete | openclaw |
< 2026.4.8 Fix: upgrade to 2026.4.8
|
Original advisory text
OpenClaw Host-Exec Environment Variable Injection
## Impact
OpenClaw Host-Exec Environment Variable Injection.
Host exec could inherit environment variables that influence interpreters, shells, or build tools.
OpenClaw is a user-controlled local assistant. This advisory is scoped to the OpenClaw trust model and does not assume a multi-tenant service boundary.
## Affected Packages / Versions
- Package: `openclaw` (npm)
- Affected versions: `<= 2026.3.28`
- Patched versions: `2026.4.8`
## Fix
The issue was fixed on `main` and is available in the patched npm version listed above. The verified fixed tree is commit `d7c3210cd6f5fdfdc1beff4c9541673e814354d5`.
## Verification
The fix was re-checked against `main` before publication, including targeted regression tests for the affected security boundary.
## Credits
Thanks @wsparks-vc for reporting.
OpenClaw Host-Exec Environment Variable Injection.
Host exec could inherit environment variables that influence interpreters, shells, or build tools.
OpenClaw is a user-controlled local assistant. This advisory is scoped to the OpenClaw trust model and does not assume a multi-tenant service boundary.
## Affected Packages / Versions
- Package: `openclaw` (npm)
- Affected versions: `<= 2026.3.28`
- Patched versions: `2026.4.8`
## Fix
The issue was fixed on `main` and is available in the patched npm version listed above. The verified fixed tree is commit `d7c3210cd6f5fdfdc1beff4c9541673e814354d5`.
## Verification
The fix was re-checked against `main` before publication, including targeted regression tests for the affected security boundary.
## Credits
Thanks @wsparks-vc for reporting.
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Type
CWE-78OS Command Injection
Timeline
Published9 Apr 2026
Updated9 Apr 2026
First seen9 Apr 2026
Sources
GHSA-w9j9-w4cp-6wgr · GHSA
Track software like this
Free during beta