PT-2026-39684 · Openclaw · Openclaw

Garagon · Published 2026-04-25 · Updated 2026-05-11 · CVE-2026-44995

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.4.20

Description Improper environment variable validation in the MCP stdio server configuration allows for arbitrary code execution. Malicious workspace configurations can pass dangerous startup variables, such as NODE OPTIONS, LD PRELOAD, or BASH ENV, to spawned MCP server processes, enabling code injection when operators start sessions using those servers.

Recommendations Update to version 2026.4.20.

Exploit

Fix

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

CWE-454

CWE-829

Related Identifiers

CVE-2026-44995

GHSA-MJ59-H3Q9-GHFH

GHSA-P3M6-JR2H-HHXJ

Affected Products

Openclaw

References · 12

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/44xxx/CVE-2026-44995.json · Exploit
• https://github.com/openclaw/openclaw/commit/85d86ebc4bf3d2226d39d132a484f4f7a299fa1b · Patch
• https://github.com/openclaw/openclaw/security/advisories/GHSA-mj59-h3q9-ghfh · Vendor Advisory
• https://github.com/openclaw/openclaw/commit/62fa5071896e95edc7f67d1cebc70a2859e283af · Patch
• https://vulncheck.com/advisories/openclaw-arbitrary-code-execution-via-mcp-stdio-environment-variables · Patch
• https://osv.dev/vulnerability/GHSA-p3m6-jr2h-hhxj · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-44995 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-mj59-h3q9-ghfh · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-44995 · Security Note
• https://github.com/openclaw/openclaw · Note
• https://t.me/CVEtracker/53381 · Telegram Post
• https://twitter.com/CVEnew/status/2053932439144394933 · Twitter Post