PT-2026-26008

Summary OpenClaw allowed dangerous process-control environment variables from env.vars for example NODE OPTIONS, LD , DYLD to flow into gateway service runtime environments, enabling startup-time code execution in the OpenClaw process context. Details collectConfigEnvVars accepted unfiltered keys...