PT-2026-49775 · Openclaw · Openclaw
CVSS v3.1
7.1
High
| Vector | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
OpenClaw versions prior to 2026.5.2
Description
An environment variable injection exists where the
STATE DIRECTORY variable in a workspace .env file can influence bundled runtime dependency roots. This allows attackers to manipulate STATE DIRECTORY to load runtime dependencies from unintended local paths, which could lead to the execution of malicious code during dependency resolution. This occurs when a trusted operator opens a repository containing a workspace .env file that sets the variable before the resolution process.Recommendations
Update to version 2026.5.2.
Avoid opening untrusted workspace env files before runtime dependency installation.
Keep channel and tool allowlists narrow.
Avoid sharing one Gateway between mutually untrusted users.
Disable the affected feature when it is not needed.
Exploit
Fix
Untrusted Search Path
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Openclaw