PT-2026-24172 · Npm · Openclaw

Published 2026-02-27 · Updated 2026-02-27

OSV

CVSS v4.0

5.1

Medium

Base vector

AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Summary

applySkillConfigEnvOverrides previously copied skills.entries.*.env values into the host process.env without applying the host env safety policy.

Impact

In affected versions, dangerous process-level variables such as NODE OPTIONS could be injected when unset, which can influence runtime/child-process behavior.

Required attacker capability

An attacker must be able to modify OpenClaw local state/config (for example ~/.openclaw/openclaw.json) to set skills.entries.<skill>.env or related skill config values.

Remediation

Fixed in 2026.2.21 by sanitizing skill env overrides and blocking dangerous host env keys (including NODE OPTIONS) before applying overrides, with regression tests covering blocked dangerous keys.

Fix Commit(s)

• 8c9f35cdb51692b650ddf05b259ccdd75cc9a83c

Found using MCPwner

Fix

Multiple Releases of Same Resource or Handle

Code Injection

Weakness Enumeration

CWE-1341

CWE-94

CWE-15

Related Identifiers

GHSA-82G8-464F-2MV7

Affected Products

Openclaw

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-4039 · Security Note
• https://osv.dev/vulnerability/GHSA-82g8-464f-2mv7 · Vendor Advisory
• https://github.com/openclaw/openclaw · Note
• https://github.com/openclaw/openclaw/commit/8c9f35cdb51692b650ddf05b259ccdd75cc9a83c · Note
• https://github.com/openclaw/openclaw/security/advisories/GHSA-82g8-464f-2mv7 · Note
• https://github.com/openclaw/openclaw/releases/tag/v2026.2.21 · Note