CVE-2026-53842: OpenClaw environment variable injection in Gmail setup gcloud execution

Executive brief

OpenClaw is a tool used for managing workspaces and integrations like Gmail. A security vulnerability exists where opening a malicious repository can allow the software to run commands using an unintended Python program. This could allow an attacker to execute unauthorized code on an operator's machine if they are tricked into opening a compromised workspace.

Technical details

An untrusted search path vulnerability (CWE-426) exists in OpenClaw's Gmail setup process. The application honors the CLOUDSDK_PYTHON environment variable defined within a workspace's .env file when executing gcloud commands. An attacker can provide a malicious repository containing a crafted .env file that points CLOUDSDK_PYTHON to an arbitrary local executable. When a trusted operator opens this workspace and initiates the Gmail setup, the system will execute the attacker-specified binary instead of the legitimate Python runtime. This requires local access to place the malicious repository and user interaction from the operator. The issue is patched in version 2026.5.2.

Affected products

• openclaw openclaw < 2026.5.2

Timeline

• 2026-05-28: disclosed
• 2026-06-18: advisory
• 2026-05-28: patched: First stable patched version 2026.5.2 released

References

• https://api.github.com/users/feynman-hou
• https://github.com/feynman-hou
• https://api.github.com/users/feynman-hou/gists%7B/gist_id%7D
• https://api.github.com/users/feynman-hou/repos
• https://avatars.githubusercontent.com/u/58766556?v=4
• https://api.github.com/users/feynman-hou/events%7B/privacy%7D