Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/02/27 9:36 p.m.16 views

OpenClaw: Skill env override host env injection via applySkillConfigEnvOverrides (defense-in-depth)

Summary applySkillConfigEnvOverrides previously copied skills.entries..env values into the host process.env without applying the host env safety policy. Impact In affected versions, dangerous process-level variables such as NODEOPTIONS could be injected when unset, which can influence...

8.8CVSS5.9AI score0.00316EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder