Lucene search
+L

1 matches found

OSV
OSV
added 2026/02/27 9:36 p.m.5 views

GHSA-82G8-464F-2MV7 OpenClaw: Skill env override host env injection via applySkillConfigEnvOverrides (defense-in-depth)

Summary applySkillConfigEnvOverrides previously copied skills.entries..env values into the host process.env without applying the host env safety policy. Impact In affected versions, dangerous process-level variables such as NODEOPTIONS could be injected when unset, which can influence...

5.1CVSS5.9AI score0.00316EPSS
SaveExploits0References5
Rows per page
Query Builder