CVE-2026-53864: OpenClaw insufficient sanitization in host environment sanitizer

CVE-2026-53864 · Severity: high · CVSS 8.1 · Published 2026-06-16

OpenClaw is a platform for managing automated tools and developer workflows. A security flaw in its environment variable sanitizer allows untrusted configuration files (like .env files) to inject sensitive Node.js control variables. This could allow an attacker to manipulate how background processes run, potentially leading to unauthorized data access or system interference.

Technologies: openclaw (npm), Openclaw. Vendors: npm, Openclaw.

Quick answers

Is CVE-2026-53864 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2026-53864 being exploited in the wild.
How severe is CVE-2026-53864?
High severity, with a CVSS score of 8.1, published 16 June 2026.
Which products and versions are affected?
openclaw (npm) SEMVER:introduced=0,fixed=2026.5.26; Openclaw < 2026.5.26, <= 2026.5.22.
Is there a fix for CVE-2026-53864?
Yes. openclaw (npm): upgrade to 2026.5.26 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-53864 attacked?
It is attacked over the network, in a software library.
Am I affected by CVE-2026-53864?
Check whether you run openclaw (npm) or Openclaw at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

  • openclaw (npm): upgrade to 2026.5.26 or later
    npm install openclaw@2026.5.26

Technical details

A vulnerability exists in OpenClaw's environment variable sanitization logic (CWE-184) where two Node.js control variables are not properly filtered. An attacker with the ability to provide lower-trust environment inputs—such as through a workspace .env file, tool environment override, or skill environment block—can pass these variables through the shared sanitizer. When the affected feature is enabled, these variables can influence subsequent Node.js child processes or coverage output paths. This requires low privileges and is reachable via the network. The issue is patched in version 2026.5.26.

Affected products

  • openclaw openclaw <= 2026.5.22

Identifiers

  • CVE-2026-53864
  • GHSA-ccwh-wwpp-6wg5

Timeline

  • 2026-05-28: disclosed
  • 2026-06-18: advisory: GitHub Advisory published
  • 2026-05-26: patched

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.