PT-2026-37324 · Npm · Openclaw

Published 2026-04-25 · Updated 2026-04-25

OSV

CVSS v4.0

6.8

Medium

Base vector

AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N

Affected Packages / Versions

• Package: openclaw (npm)
• Affected versions: >= 2026.4.5, < 2026.4.20
• Patched version: 2026.4.20

Impact

A malicious workspace .env could set MINIMAX API HOST and redirect credentialed MiniMax requests to an attacker-controlled origin, exposing the MiniMax API key in the outbound Authorization header.

This requires running OpenClaw from an attacker-controlled workspace. Severity is medium.

Fix

OpenClaw now blocks MINIMAX API HOST from workspace dotenv injection and removes env-driven URL routing from the affected MiniMax request path.

Fix commit:

• 2f06696579a1ab0cb5bbbbb6a900414a6b2e3cd1

Release

Fixed in OpenClaw 2026.4.20.

Fix

Insufficiently Protected Credentials

Weakness Enumeration

CWE-15

CWE-522

Related Identifiers

GHSA-H2VW-PH2C-JVWF

Affected Products

Openclaw

References · 6

• https://osv.dev/vulnerability/GHSA-h2vw-ph2c-jvwf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-44992 · Security Note
• https://github.com/openclaw/openclaw/security/advisories/GHSA-h2vw-ph2c-jvwf · Note
• https://github.com/openclaw/openclaw/commit/2f06696579a1ab0cb5bbbbb6a900414a6b2e3cd1 · Note
• https://github.com/openclaw/openclaw · Note
• https://vulncheck.com/advisories/openclaw-minimax-api-host-override-via-workspace-dotenv · Note