Incomplete List of Disallowed Inputs

🗓️ 31 Mar 2026 23:57:00Reported by Snyk Security DatabaseType

Incomplete disallowed inputs from unsanitized env vars may enable code execution or credential access.

Reporter	Title	Published	Views	Family All 14
ATTACKERKB	CVE-2026-41332	23 Apr 202621:57	–	attackerkb
CNNVD	OpenClaw 安全漏洞	23 Apr 202600:00	–	cnnvd
CVE	CVE-2026-41332	23 Apr 202621:57	–	cve
Cvelist	CVE-2026-41332 OpenClaw < 2026.3.28 - Code Execution via Missing Environment Variable Blocklist	23 Apr 202621:57	–	cvelist
EUVD	EUVD-2026-25315	24 Apr 202600:31	–	euvd
Github Security Blog	OpenClaw host-env blocklist missing `GIT_TEMPLATE_DIR` and `AWS_CONFIG_FILE` allows code execution via env override	31 Mar 202623:57	–	github
Github Security Blog	Duplicate Advisory: OpenClaw host-env blocklist missing `GIT_TEMPLATE_DIR` and `AWS_CONFIG_FILE` allows code execution via env override	24 Apr 202600:31	–	github
NVD	CVE-2026-41332	23 Apr 202622:16	–	nvd
OSV	GHSA-M866-6QV5-P2FG OpenClaw host-env blocklist missing `GIT_TEMPLATE_DIR` and `AWS_CONFIG_FILE` allows code execution via env override	31 Mar 202623:57	–	osv
OSV	GHSA-WCM7-94WG-H74H Duplicate Advisory: OpenClaw host-env blocklist missing `GIT_TEMPLATE_DIR` and `AWS_CONFIG_FILE` allows code execution via env override	24 Apr 202600:31	–	osv