Executive brief
OpenClaw is a platform used for managing and installing 'skills' or plugins. A security flaw allows a malicious project file to trick the system into running unauthorized software during the installation process. If a user opens a compromised project, an attacker could gain control over the system or access sensitive data.
Technical details
An untrusted search path vulnerability (CWE-426) exists in OpenClaw's skill installation flow. The application allows a workspace-level `.env` file to override the path to the Homebrew executable used by the install helper. An attacker can exploit this by providing a malicious repository containing a crafted `.env` file; when a trusted operator opens the workspace and initiates a skill installation, the system executes an arbitrary, attacker-controlled binary instead of the legitimate Homebrew executable. This can lead to full remote code execution on the operator's machine. The issue is fixed in version 2026.5.27.
Affected products
- OpenClaw openclaw < 2026.5.27
Timeline
- 2026-05-28: disclosed
- 2026-05-28: patched: First stable patched version 2026.5.27 released
- 2026-07-02: advisory