Feynman-Hou

**Name of the Vulnerable Software and Affected Versions** OpenClaw versions prior to 2026.5.2 **Description** An environment variable injection exists where workspace `.env` files can influence the Python runtime selection during Gmail setup `gcloud` execution. Attackers with repository access can manipulate the `CLOUDSDK PYTHON` variable to execute setup through unintended local Python paths, potentially enabling arbitrary code execution. This occurs when a workspace `.env` in a repository is opened by a trusted operator. **Recommendations** Update to version 2026.5.2. Run Gmail setup from trusted workspaces and clear workspace env overrides. Keep channel and tool allowlists narrow. Avoid sharing one Gateway between mutually untrusted users. Disable the affected feature when it is not needed.

**Name of the Vulnerable Software and Affected Versions** OpenClaw versions prior to 2026.4.29 **Description** A path traversal issue exists in the install helper where workspace `.env` files can override the `npm execpath` configuration used for bundled runtime dependency installation. This allows an attacker with workspace access to execute unintended local package-manager executables during dependency setup, potentially compromising the build environment. **Recommendations** Update to version 2026.4.29. Install bundled runtime dependencies only from trusted workspaces. Keep channel and tool allowlists narrow. Avoid sharing one Gateway between mutually untrusted users. Disable the install helper feature when it is not needed.

**Name of the Vulnerable Software and Affected Versions** OpenClaw versions prior to 2026.5.2 **Description** An environment variable injection exists where the `STATE DIRECTORY` variable in a workspace `.env` file can influence bundled runtime dependency roots. This allows attackers to manipulate `STATE DIRECTORY` to load runtime dependencies from unintended local paths, which could lead to the execution of malicious code during dependency resolution. This occurs when a trusted operator opens a repository containing a workspace `.env` file that sets the variable before the resolution process. **Recommendations** Update to version 2026.5.2. Avoid opening untrusted workspace env files before runtime dependency installation. Keep channel and tool allowlists narrow. Avoid sharing one Gateway between mutually untrusted users. Disable the affected feature when it is not needed.

**Name of the Vulnerable Software and Affected Versions** PJSIP versions prior to 2.17 **Description** In GnuTLS builds, the SIP TLS transport (sip transport tls) may accept connections with invalid or untrusted certificates. This occurs even when the application explicitly enables certificate verification through the `verify server` or `verify client` variables set to `PJ TRUE`. **Recommendations** Update to version 2.17.

**Name of the Vulnerable Software and Affected Versions** OpenClaw versions prior to 2026.4.23 **Description** The software caches resolved webhook route secrets backed by `SecretRef` values. This behavior allows stale secrets to remain valid even after they have been rotated and reloaded. Consequently, an attacker possessing previously valid webhook route secrets can continue to authenticate requests and invoke configured webhook task flows until the gateway or plugin is restarted. **Recommendations** Update to version 2026.4.23 or later. As a temporary workaround, restart the gateway or plugin to clear the cached secrets.