N/A

CVSS Score

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-hxvm-xjvf-93f3

GHSA-hxvm-xjvf-93f3: OpenClaw: Workspace dotenv could override runtime-control environment variables

Affected Packages / Versions

Package: openclaw (npm)
Affected versions: < 2026.4.20
Patched version: 2026.4.20

Impact

Workspace .env loading did not reserve the OPENCLAW_ runtime-control namespace broadly enough. A malicious workspace could set variables such as OPENCLAW_GIT_DIR before source-update or installer flows, potentially steering trusted OpenClaw runtime behavior.

This requires running OpenClaw from an attacker-controlled workspace. Severity is medium.

Fix

OpenClaw now reserves the workspace OPENCLAW_ environment namespace and rejects workspace dotenv entries for OpenClaw runtime-control variables.

Fix commit:

018494fa3ebb9145112e68b56fe1cb2e9f9a9ed6

Release

Fixed in OpenClaw 2026.4.20.

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-hxvm-xjvf-93f3

GHSA-hxvm-xjvf-93f3:

N/A

CVSS Score

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	< 2026.4.20	2026.4.20

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability, GHSA-hxvm-xjvf-93f3, allows a malicious workspace to override OpenClaw's runtime-control environment variables. The root cause is an incomplete blocklist in the function that loads .env files from a workspace. The fix, committed in 018494fa3ebb9145112e68b56fe1cb2e9f9a9ed6, expands the blocklist to include the OPENCLAW_ prefix, preventing the loading of these sensitive variables. The analysis of the patch file src/infra/dotenv.ts reveals the addition of "OPENCLAW_" to the BLOCKED_WORKSPACE_DOTENV_PREFIXES constant. This indicates that the function utilizing this constant to filter environment variables is the point of vulnerability. Although the exact function name is not present in the provided patch diff, based on the file's purpose (dotenv.ts), it is highly probable that a function, which we've identified as loadWorkspaceDotenv for clarity, is responsible for loading the .env file and was failing to properly sanitize the input. The associated test file src/infra/dotenv.test.ts further confirms this by adding tests for OPENCLAW_ prefixed variables. Therefore, any runtime profile of an exploitation attempt would show this function processing the malicious .env file.

Vulnerable functions

loadWorkspaceDotenv

src/infra/dotenv.ts

The vulnerability lies in a function within `src/infra/dotenv.ts`, which is responsible for loading environment variables from a workspace's `.env` file. Before the patch, this function did not block environment variables prefixed with `OPENCLAW_`. This allowed a malicious workspace to set runtime-control variables, such as `OPENCLAW_GIT_DIR`, potentially leading to arbitrary code execution or other unintended behaviors. The patch addresses this by adding `OPENCLAW_` to the `BLOCKED_WORKSPACE_DOTENV_PREFIXES` list, ensuring that these variables are no longer loaded from untrusted workspace `.env` files. The function is named `loadWorkspaceDotenv` based on the context of the vulnerability and the file name.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.