PT-2026-24172 · Npm · Openclaw

Publicado 2026-02-27 · Atualizado 2026-02-27

OSV

CVSS v4.0

5.1

Média

Vetor base

AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Summary

applySkillConfigEnvOverrides previously copied skills.entries.*.env values into the host process.env without applying the host env safety policy.

Impact

In affected versions, dangerous process-level variables such as NODE OPTIONS could be injected when unset, which can influence runtime/child-process behavior.

Required attacker capability

An attacker must be able to modify OpenClaw local state/config (for example ~/.openclaw/openclaw.json) to set skills.entries.<skill>.env or related skill config values.

Remediation

Fixed in 2026.2.21 by sanitizing skill env overrides and blocking dangerous host env keys (including NODE OPTIONS) before applying overrides, with regression tests covering blocked dangerous keys.

Fix Commit(s)

• 8c9f35cdb51692b650ddf05b259ccdd75cc9a83c

Found using MCPwner

Correção

Multiple Releases of Same Resource or Handle

Code Injection

Enumeração de Fraquezas

CWE-1341

CWE-94

CWE-15

Identificadores relacionados

GHSA-82G8-464F-2MV7

Produtos afetados

Openclaw

Referências · 6

• https://github.com/openclaw/openclaw · Nota
• https://github.com/openclaw/openclaw/commit/8c9f35cdb51692b650ddf05b259ccdd75cc9a83c · Nota
• https://github.com/openclaw/openclaw/security/advisories/GHSA-82g8-464f-2mv7 · Nota
• https://github.com/openclaw/openclaw/releases/tag/v2026.2.21 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-4039 · Nota de Segurança
• https://osv.dev/vulnerability/GHSA-82g8-464f-2mv7 · Aviso do Fabricante