Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/03/03 7:53 p.m.•23 views

OpenClaw's config env vars allowed startup env injection into service runtime

Summary OpenClaw allowed dangerous process-control environment variables from env.vars for example NODEOPTIONS, LD, DYLD to flow into gateway service runtime environments, enabling startup-time code execution in the OpenClaw process context. Details collectConfigEnvVars accepted unfiltered keys...

8.8CVSS8AI score0.00371EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder