Executive brief
OpenClaw is a workflow orchestration platform that executes Node.js-based tasks and processes. An insufficient sanitization flaw in the host environment sanitizer allows attackers with access to workspace configuration files or tool settings to inject Node.js control variables that influence child process behavior and execution paths. This could lead to unauthorized code execution or path traversal attacks in environments where untrusted users can modify workspace files or tool configurations.
Technical details
This vulnerability is an incomplete input validation flaw (CWE-184) in OpenClaw's host environment sanitizer. The sanitizer is intended to block dangerous Node.js control variables from untrusted sources (workspace .env files, tool environment overrides, skill environment blocks), but it failed to account for two specific variables. Attackers with write access to workspace configuration or tool settings can inject these Node.js control variables to influence the behavior of child processes or modify coverage output paths. The attack requires authenticated access to a lower-trust configuration source and is only exploitable when the affected feature is enabled. A fix is available in version 2026.5.26 and later.
Affected products
- OpenClaw OpenClaw before 2026.5.26
Timeline
- 2026-05-28: disclosed
- 2026-05-26: patched: Patched version 2026.5.26 released