Openclaw cli: OpenClaw: Command hijacking via unsafe PATH handling (bootstrapping + node-host PATH overrides) (CVE-2026-29610)

OpenClaw CLI versions prior to 2026.2.14 accepted untrusted PATH environment variables in limited contexts, which could lead to command hijacking. Specifically, an attacker with authenticated access to invoke node-host execution and the ability to override PATH could cause OpenClaw to resolve and run attacker-controlled binaries earlier in the PATH. Additionally, running OpenClaw from an attacker-controlled directory containing malicious executables in node_modules/.bin could also lead to local command hijacking. The fix disables project-local PATH bootstrapping by default and ignores PATH overrides in node-host execution, preventing these attack vectors.

Successful exploitation allows an attacker with certain authorized access to execute arbitrary commands by hijacking the PATH resolution process. This can lead to full confidentiality, integrity, and availability compromise (C:H/I:H/A:H) of the affected system. The vulnerability is significant in environments relying on allowlist or safe-bin protections for command execution, especially if misconfigured to allow PATH overrides or untrusted execution surfaces.

A patch is available in OpenClaw CLI version 2026.2.14 and later. Users should upgrade to this version or newer. The fix disables project-local PATH bootstrapping by default and prevents node-host from accepting request-scoped PATH overrides. Deployments should avoid configurations that allow untrusted parties to invoke node-host execution or pass PATH overrides. If upgrading is not immediately possible, ensure that execution surfaces and environment variables are tightly controlled to prevent PATH manipulation.