GHSA-qcj9-wwgw-6gm8HighCVSS 7.8

OpenClaw: Workspace `.env` can override the bundled plugin trust root

Published
April 3, 2026
Last Modified
May 6, 2026

🔗 CVE IDs covered (1)

CVE-2026-41396 →

📋 Description

Summary

Workspace .env can override the bundled plugin trust root

Current Maintainer Triage

  • Status: open
  • Normalized severity: high
  • Assessment: v2026.3.28 still lets workspace .env override OPENCLAW_BUNDLED_PLUGINS_DIR, but critical is too high because exploitation still depends on attacker-controlled workspace loading, not a universal remote break.

Affected Packages / Versions

  • Package: openclaw (npm)
  • Latest published npm version: 2026.3.31
  • Vulnerable version range: <=2026.3.28
  • Patched versions: >= 2026.3.31
  • First stable tag containing the fix: v2026.3.31

Fix Commit(s)

  • 330a9f98cb29c79b1c16a2117e03d6276a0d6289 — 2026-03-31T19:25:12+09:00

OpenClaw thanks @nexrin for reporting.

🎯 Affected products1

  • npm/openclaw:<= 2026.3.28

🔗 References (6)