~ / search / GHSA-82g8-464f-2mv7

GHSA-82g8-464f-2mv7

OpenClaw: Skill env override host env injection via applySkillConfigEnvOverrides (defense-in-depth)

Source: GitHub Advisory Database (reviewed) Moderate CVE-2026-4039

Packages

EcosystemPackageAffectedFixed in
npm openclaw < 2026.2.21 2026.2.21

Details

As written in the advisory (Markdown source, shown as plain text).

### Summary `applySkillConfigEnvOverrides` previously copied `skills.entries.*.env` values into the host `process.env` without applying the host env safety policy. ### Impact In affected versions, dangerous process-level variables such as `NODE_OPTIONS` could be injected when unset, which can influence runtime/child-process behavior. ### Required attacker capability An attacker must be able to modify OpenClaw local state/config (for example `~/.openclaw/openclaw.json`) to set `skills.entries.<skill>.env` or related skill config values. ### Remediation Fixed in `2026.2.21` by sanitizing skill env overrides and blocking dangerous host env keys (including `NODE_OPTIONS`) before applying overrides, with regression tests covering blocked dangerous keys. ## Fix Commit(s) - `8c9f35cdb51692b650ddf05b259ccdd75cc9a83c` Found using [MCPwner](https://github.com/Pigyon/MCPwner)

References

External links from the advisory. They lead to third-party sites.