CVE-2026-44992: OpenClaw environment variable injection in MiniMax API host configuration

Executive brief

OpenClaw is an npm package that interacts with external services. A vulnerability exists where a malicious configuration file in a workspace can redirect requests intended for the MiniMax service to an attacker's server. This could allow an attacker to steal sensitive API keys, potentially leading to unauthorized access to the victim's MiniMax account and associated data.

Technical details

OpenClaw versions between 2026.4.5 and 2026.4.20 are vulnerable to a configuration injection attack via workspace .env files. By setting the MINIMAX_API_HOST environment variable in a malicious workspace, an attacker can redirect outbound requests to an arbitrary origin. Because these requests include the MiniMax API key in the Authorization header, the attacker can capture these credentials if a user runs OpenClaw within the compromised workspace. The fix involves blocking the MINIMAX_API_HOST variable from being injected via dotenv and removing environment-driven routing for the affected request path.

Affected products

• openclaw openclaw >= 2026.4.5, < 2026.4.20

Timeline

• 2026-04-21: disclosed: Initial disclosure by reporter
• 2026-04-25: advisory: GitHub Advisory published
• 2026-04-20: patched: Version 2026.4.20 released with fix

References

• https://api.github.com/users/nexrin
• https://github.com/nexrin
• https://api.github.com/users/nexrin/gists%7B/gist_id%7D
• https://api.github.com/users/nexrin/repos
• https://avatars.githubusercontent.com/u/268879349?v=4
• https://api.github.com/users/nexrin/events%7B/privacy%7D