An environment variable injection vulnerability in OpenClaw before version 2026.4.9 allows low-privileged, authenticated users with user interaction to manipulate runtime-control variables and compromise application integrity.

This is an External Control of System or Configuration Setting flaw classified under CWE-15, triggered via malicious workspace .env files that allow manipulation of update sources, gateway URLs, and browser paths, requiring low privileges and user interaction.

A successful exploit of this vulnerability can lead to total technical impact, compromising application behavior and potentially allowing malicious actors to redirect gateway communications or update sources. This creates significant risks for unauthorized system manipulation and data compromise. The assigned CVSS score of 7.3 places this issue in the high severity range, reflecting the severity of potential runtime control compromise.

Immediate Action: Update the npm/openclaw package to version 2026.4.9 or later where the fix is integrated.

Proactive Monitoring: Monitor access logs and file integrity monitoring systems for unauthorized modifications to workspace .env files.

Compensating Controls: Restrict permissions on workspace directories and enforce strict file creation policies to prevent untrusted users from introducing unauthorized configuration files.

Public Exploit Available: No (no confirmed public exploit or weaponized module identified in current data).

Given the high severity score and potential for complete runtime control compromise, administrators must prioritize updating the OpenClaw package to version 2026.4.9 immediately. Applying this patch eliminates the environment variable injection vector and secures workspace configuration handling against unauthorized manipulation.