N/A

CVSS Score

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-82g8-464f-2mv7

GHSA-82g8-464f-2mv7: OpenClaw: Skill env override host env injection via applySkillConfigEnvOverrides (defense-in-depth)

Summary

applySkillConfigEnvOverrides previously copied skills.entries.*.env values into the host process.env without applying the host env safety policy.

Impact

In affected versions, dangerous process-level variables such as NODE_OPTIONS could be injected when unset, which can influence runtime/child-process behavior.

Required attacker capability

An attacker must be able to modify OpenClaw local state/config (for example ~/.openclaw/openclaw.json) to set skills.entries.<skill>.env or related skill config values.

Remediation

Fixed in 2026.2.21 by sanitizing skill env overrides and blocking dangerous host env keys (including NODE_OPTIONS) before applying overrides, with regression tests covering blocked dangerous keys.

Fix Commit(s)

8c9f35cdb51692b650ddf05b259ccdd75cc9a83c

Found using MCPwner

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-82g8-464f-2mv7

GHSA-82g8-464f-2mv7:

N/A

CVSS Score

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	< 2026.2.21	2026.2.21

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability exists because the OpenClaw application allows for skill configurations to define environment variables that are then applied to the host process. The core of the issue lies in the applySkillConfigEnvOverrides function, which, prior to the patch, would take these environment variables from the configuration and set them in process.env without any sanitization. This allows a user with access to the local OpenClaw configuration file (~/.openclaw/openclaw.json) to inject dangerous environment variables. For example, setting NODE_OPTIONS could lead to arbitrary code execution when a new Node.js process is started. The functions applySkillEnvOverrides and applySkillEnvOverridesFromSnapshot are the exported entry points that trigger this vulnerable behavior by calling applySkillConfigEnvOverrides. The fix introduces a sanitization step using a new sanitizeSkillEnvOverrides function, which blocks known dangerous environment variables before they are applied.

Vulnerable functions

applySkillConfigEnvOverrides

src/agents/skills/env-overrides.ts

This function was responsible for applying environment variable overrides from a skill's configuration directly to the host's `process.env`. The vulnerability lies in the fact that it did not sanitize or validate the keys or values of these environment variables. An attacker with permission to modify the OpenClaw configuration could inject malicious environment variables like `NODE_OPTIONS`, leading to arbitrary code execution.

applySkillEnvOverrides

src/agents/skills/env-overrides.ts

This function serves as an entry point for applying environment variable overrides. It iterates over skill entries and calls the vulnerable `applySkillConfigEnvOverrides` function for each. An exploit would likely trace back to this function as it orchestrates the application of the malicious environment variables.

applySkillEnvOverridesFromSnapshot

src/agents/skills/env-overrides.ts

Similar to `applySkillEnvOverrides`, this function is another entry point for applying environment variable overrides, but from a skill snapshot. It calls the vulnerable `applySkillConfigEnvOverrides` function, making it a key part of the exploitation path.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.

N/A

-

Basic Information

Basic Information

Concerned about an active attack path?

GHSA-82g8-464f-2mv7: OpenClaw: Skill env override host env injection via applySkillConfigEnvOverrides (defense-in-depth)

Summary

Impact

Required attacker capability

Remediation

Fix Commit(s)

GHSA-82g8-464f-2mv7:

N/A

-

Basic Information

Basic Information

Is this CVE running in your environment?

Technical Details

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Vulnerability IntelligenceMiggo AI

Unlock WAF rules for this CVE

WAF Protection Rules

WAF Rule

Reasoning

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Basic Information

Basic Information

GHSA-82g8-464f-2mv7: OpenClaw: Skill env override host env injection via applySkillConfigEnvOverrides (defense-in-depth)

Summary

Impact

Required attacker capability

Remediation

Fix Commit(s)

N/A

N/A

Technical Details

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI