Openclaw cli: OpenClaw affected by BASH_ENV / ENV startup-file injection into spawned shell commands

The OpenClaw CLI is vulnerable to startup-file injection via the BASH_ENV and ENV environment variables, which can lead to unintended pre-command shell execution. This occurs when attacker-controlled environment variables are admitted and inherited by host command execution paths. The fix hardens environment handling by blocking dangerous environment keys and prefixes, sanitizing inherited environment variables, and aligning sanitization policies across platforms. Exploitation requires local or privileged influence over configuration or environment inputs, with no standalone remote unauthenticated trigger.

The impact is medium severity because exploitation requires local or privileged access to manipulate environment variables or configuration inputs. There is no remote unauthenticated exploitation vector. Successful exploitation could lead to unintended shell command execution in the context of spawned commands, potentially allowing privilege escalation or unauthorized command execution within the affected environment.

A patch is available and planned for release in OpenClaw CLI version 2026.2.21. Users should upgrade to this version once it is published to remediate the vulnerability. The fix includes environment sanitization and blocking of dangerous environment variables to prevent injection. Until the patch is applied, avoid running the software with untrusted environment inputs or configurations that could be influenced by attackers.