PT-2026-32201

Summary Workspace .env can override the bundled hooks root and load attacker hook code Current Maintainer Triage - Status: open - Normalized severity: high - Assessment: v2026.3.28 still lets workspace .env override OPENCLAW BUNDLED HOOKS DIR, which can replace trusted default-on bundled hooks fr...