Executive brief
OpenClaw is a development automation tool that executes code in isolated host environments. The vulnerability allows authenticated users to override critical security environment variables (proxy settings, TLS certificates, Docker configuration, and Git TLS controls) by circumventing the host execution policy enforcement, potentially enabling man-in-the-middle attacks or unauthorized code execution paths.
Technical details
The vulnerability exists in OpenClaw's host exec environment policy enforcement, where proxy, TLS, Docker, and Git TLS control variables were not properly restricted when executing host commands. This is an improper access control issue (CWE-269, CWE-453) affecting versions through 2026.3.28. An attacker with local or adjacent network access and low privileges can override these critical environment variables to bypass intended security controls. The fix in commit 4d912e0 (released in v2026.3.31) properly restricts these variables from being overridden by host exec policies.
Affected products
- OpenClaw OpenClaw <=2026.3.28
Timeline
- 2026-04-03: disclosed
- 2026-03-31: patched: Fix commit 4d912e0 merged; released in v2026.3.31