OpenClaw incomplete environment variable denylist in exec policy

Executive brief

OpenClaw is a software package available via npm. A security flaw was identified where the system failed to block certain high-risk environment variables during execution. This could allow an attacker with low-level access to manipulate how the software runs or how it communicates over the network, potentially leading to unauthorized system modifications.

Technical details

OpenClaw's execution environment security policy contained an incomplete denylist (CWE-184), missing critical interpreter startup variables such as VIMINIT, EXINIT, LUA_INIT, and HOSTALIASES. An attacker with low privileges can supply these environment overrides to influence downstream execution or alter network behavior. The vulnerability is reachable over the network and requires no user interaction. The issue is resolved in version 2026.4.10 and later by expanding the host environment security policy denylist to include these high-risk variables.

Affected products

• openclaw openclaw < 2026.4.10

Timeline

• 2026-04-16: disclosed: Advisory published by maintainers
• 2026-04-17: advisory: GitHub Advisory reviewed and published
• 2026-04-10: patched: First stable version containing the fix released

References

• https://api.github.com/users/feiyang666
• https://github.com/feiyang666
• https://api.github.com/users/feiyang666/gists%7B/gist_id%7D
• https://api.github.com/users/feiyang666/repos
• https://avatars.githubusercontent.com/u/11484472?v=4
• https://api.github.com/users/feiyang666/events%7B/privacy%7D