N/A

CVSS Score

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-w9j9-w4cp-6wgr

GHSA-w9j9-w4cp-6wgr: OpenClaw Host-Exec Environment Variable Injection

Impact

OpenClaw Host-Exec Environment Variable Injection.

Host exec could inherit environment variables that influence interpreters, shells, or build tools.

OpenClaw is a user-controlled local assistant. This advisory is scoped to the OpenClaw trust model and does not assume a multi-tenant service boundary.

Affected Packages / Versions

Package: openclaw (npm)
Affected versions: <= 2026.3.28
Patched versions: 2026.4.8

Fix

The issue was fixed on main and is available in the patched npm version listed above. The verified fixed tree is commit d7c3210cd6f5fdfdc1beff4c9541673e814354d5.

Verification

The fix was re-checked against main before publication, including targeted regression tests for the affected security boundary.

Credits

Thanks @wsparks-vc for reporting.

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-w9j9-w4cp-6wgr

GHSA-w9j9-w4cp-6wgr:

N/A

CVSS Score

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	< 2026.4.8	2026.4.8

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability, described as 'OpenClaw Host-Exec Environment Variable Injection', pertains to how the application handles network requests in the presence of proxy-related environment variables. The provided patch commit d7c3210cd6f5fdfdc1beff4c9541673e814354d5 directly modifies the fetchWithSsrFGuard function in src/infra/net/fetch-guard.ts.

The analysis of the patch reveals a logic flaw. Prior to the fix, the function would resolve and pin the DNS of a target hostname before checking if a trusted environment proxy was configured. This was incorrect because if a proxy is in use, the proxy itself should be responsible for DNS resolution. The fix was to move the DNS pinning logic to only execute when a trusted proxy is not in use.

Therefore, the fetchWithSsrFGuard function is identified as the vulnerable function. During exploitation, an attacker could manipulate the environment to set a proxy and then make a request through the openclaw application. The vulnerable version of the code would perform DNS pinning when it shouldn't, which could be exploited depending on the network environment and the proxy's behavior. A runtime profile would show execution within fetchWithSsrFGuard when the vulnerability is triggered.

Vulnerable functions

fetchWithSsrFGuard

src/infra/net/fetch-guard.ts

The function `fetchWithSsrFGuard` was vulnerable because it performed DNS pinning by calling `resolvePinnedHostnameWithPolicy` even when a trusted proxy was configured via environment variables (e.g., `HTTP_PROXY`). This could lead to requests being sent to an incorrect IP address if the proxy was intended to handle DNS resolution, potentially bypassing security controls or causing information leakage. The patch moves the DNS pinning logic into an `else` block, ensuring it is skipped when a trusted proxy is active.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.