info:
  name: OpenClaw
  cve: CVE-2026-43531
  summary: OpenClaw Environment Variable Injection via Workspace .env File (before 2026.4.9)
  details: >-
    OpenClaw before 2026.4.9 contains an environment variable injection vulnerability
    allowing malicious workspace .env files to set runtime-control variables. Attackers
    can inject variables affecting update sources, gateway URLs, ClawHub resolution,
    and browser executable paths to compromise application behavior.
  cvss: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
  severity: HIGH
  security_advise: Upgrade OpenClaw to version 2026.4.9 or later. Avoid opening untrusted workspace directories that contain malicious .env files.
  references:
    - https://github.com/openclaw/openclaw/commit/dbfcef319618158fa40b31cdac386ea34c392c0c
    - https://github.com/openclaw/openclaw/security/advisories/GHSA-7wv4-cc7p-jhxc
    - https://www.vulncheck.com/advisories/openclaw-environment-variable-injection-via-workspace-env-file
rule: version < "2026.4.9"
references:
  - https://github.com/openclaw/openclaw/commit/dbfcef319618158fa40b31cdac386ea34c392c0c
  - https://github.com/openclaw/openclaw/security/advisories/GHSA-7wv4-cc7p-jhxc
  - https://www.vulncheck.com/advisories/openclaw-environment-variable-injection-via-workspace-env-file