CVE-2026-53858: OpenClaw environment variable injection in STATE_DIRECTORY

Executive brief

OpenClaw is a workspace management tool. A vulnerability exists where opening a malicious repository can allow the workspace's configuration files to redirect where the application looks for its internal software components. This could allow an attacker to trick a user into running malicious code, potentially leading to a full system compromise or data theft.

Technical details

A CWE-426 (Untrusted Search Path) vulnerability exists in OpenClaw where the `STATE_DIRECTORY` environment variable can be set via a workspace `.env` file. Because this variable is processed before runtime dependency root resolution, an attacker can provide a malicious repository that, when opened by a user, forces the application to load bundled runtime dependencies from an attacker-controlled local path. This requires user interaction (opening a malicious workspace) and can result in local privilege escalation or arbitrary code execution within the context of the operator. The issue is fixed in version 2026.5.2.

Affected products

• OpenClaw openclaw < 2026.5.2

Timeline

• 2026-05-28: disclosed
• 2026-06-18: advisory: GitHub Advisory published

References

• https://api.github.com/users/feynman-hou
• https://github.com/feynman-hou
• https://api.github.com/users/feynman-hou/gists%7B/gist_id%7D
• https://api.github.com/users/feynman-hou/repos
• https://avatars.githubusercontent.com/u/58766556?v=4
• https://api.github.com/users/feynman-hou/events%7B/privacy%7D