CVE-2026-35650

HIGH

OpenClaw < 2026.3.22 - Environment Variable Override Bypass via Inconsistent Sanitization

Title source: cna

Description

OpenClaw before 2026.3.22 contains an environment variable override handling vulnerability that allows attackers to bypass the shared host environment policy through inconsistent sanitization paths. Attackers can supply blocked or malformed override keys that slip through inconsistent validation to execute arbitrary code with unintended environment variables.

References (4)

[Third Party Advisory] https://github.com/openclaw/openclaw/security/advisories/GHSA-39pp-xp36-q6mg

[Patch] https://github.com/openclaw/openclaw/commit/630f1479c44f78484dfa21bb407cbe6f171dac87

[Patch] https://github.com/openclaw/openclaw/commit/7abfff756d6c68d17e21d1657bbacbaec86de232

View Patch ZIP pw:eip

[Third Party Advisory] https://www.vulncheck.com/advisories/openclaw-environment-variable-override-bypass-via-inconsistent-sanitization

Scores

CVSS v3 7.5

EPSS 0.0007

EPSS Percentile 21.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-15

Status published

Products (4)

npm/openclaw 0 - 2026.3.22npm

OpenClaw/OpenClaw < 2026.3.22

openclaw/openclaw < 2026.3.22

OpenClaw/OpenClaw 2026.3.22

Published Apr 10, 2026

Tracked Since Apr 10, 2026