Executive brief
OpenClaw is a development tool that manages code dependencies and builds. A vulnerability allows an attacker with workspace access to override the package manager executable path through environment variables, potentially causing the system to execute a malicious package manager during dependency installation. This could compromise the build environment and inject malicious code into the final application.
Technical details
OpenClaw contains a path traversal vulnerability (CWE-426: Untrusted Search Path) in its install helper that permits workspace .env files to override the npm_execpath configuration used during bundled runtime dependency installation. An attacker with write access to a workspace can craft a malicious .env file that redirects the package manager executable to an attacker-controlled binary. The vulnerability is reachable only when the affected feature is enabled and requires local workspace access or the ability to modify files in a trusted repository. An attacker can execute arbitrary code with the privileges of the operator installing dependencies. The vulnerability was patched in version 2026.4.29.
Affected products
- OpenClaw OpenClaw < 2026.4.29
Timeline
- 2026-05-28: disclosed
- 2026-04-29: patched: Version 2026.4.29 released
- 2026-06-16: advisory: Advisory published as duplicate of GHSA-24vr-rprv-67rf
- 2026-06-18: other: Advisory withdrawn as duplicate