PT-2026-39692 · Openclaw · Openclaw

Qi Deng · Published 2026-05-04 · Updated 2026-05-11 · CVE-2026-45003

Positive Technologies (AI Summary)

CVSS v3.1

5.0

Medium

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.4.22

Description Workspace dotenv files can be used to override connector endpoint hosts for Matrix, Mattermost, IRC, and Synology connectors. This allows attackers with workspace access to redirect runtime traffic to malicious endpoints by configuring endpoint variables within these files.

Recommendations Update to version 2026.4.22.

Exploit

Fix

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

CWE-610

CWE-441

Related Identifiers

CVE-2026-45003

GHSA-55CF-XX38-4P9P

GHSA-5JGM-F9WR-9QM7

Affected Products

Openclaw

References · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/45xxx/CVE-2026-45003.json · Exploit
• https://github.com/openclaw/openclaw/commit/0623079e98abf7202591f1b04a89755eb7ec9272 · Patch
• https://github.com/openclaw/openclaw/security/advisories/GHSA-55cf-xx38-4p9p · Vendor Advisory
• https://vulncheck.com/advisories/openclaw-connector-endpoint-host-override-via-workspace-dotenv-files · Patch
• https://osv.dev/vulnerability/GHSA-55cf-xx38-4p9p · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-45003 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-5jgm-f9wr-9qm7 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-45003 · Security Note
• https://github.com/openclaw/openclaw · Note
• https://t.me/CVEtracker/53389 · Telegram Post
• https://twitter.com/CVEnew/status/2053932431217172523 · Twitter Post