Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/03/03 7:53 p.m.11 views

OpenClaw's config env vars allowed startup env injection into service runtime

Summary OpenClaw allowed dangerous process-control environment variables from env.vars for example NODEOPTIONS, LD, DYLD to flow into gateway service runtime environments, enabling startup-time code execution in the OpenClaw process context. Details collectConfigEnvVars accepted unfiltered keys...

8.8CVSS6.3AI score0.00371EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder