A critical vulnerability in OpenClaw allows attackers to execute arbitrary code by manipulating environment variables to inject malicious plugins into the workspace.

This vulnerability, categorized as CWE-829, occurs because the application fails to properly sanitize the OPENCLAW_BUNDLED_PLUGINS_DIR environment variable when defined in a local workspace .env file. An attacker who can influence the workspace configuration can force the application to load plugins from an untrusted directory, bypassing trust verification mechanisms.

The ability to inject malicious plugins grants an attacker the power to execute arbitrary code within the context of the OpenClaw environment. With a CVSS score of 7.8, this flaw represents a significant risk to data integrity and system confidentiality, as compromised plugins can access sensitive workspace data or facilitate lateral movement within the development environment.

Immediate Action: Update OpenClaw to version 2026.3.31 or later to implement the fix for environment variable overrides.

Proactive Monitoring: Review application logs for unexpected plugin loading paths or unauthorized modifications to local workspace configuration files.

Compensating Controls: Restrict write access to workspace directories and .env files to prevent unauthorized users from modifying environmental configurations.

Public Exploit Available: No (exploit_available: false)

Given the potential for complete system compromise via arbitrary code execution, this vulnerability poses a severe threat to development environments. Organizations should prioritize the immediate update of OpenClaw to the patched version, 2026.3.31, to ensure that plugin trust verification cannot be bypassed via local environment configurations.