Openclaw cli: OpenClaw: Host environment sanitizer missed two Node.js control variables (CVE-2026-53864)
Description
OpenClaw CLI versions from 2026.1.29 up to but not including 2026.5.28 have a vulnerability where the host environment sanitizer misses two Node.js control variables. This allows lower-trust environment sources, such as workspace .env files or tool overrides, to pass these control variables through the sanitizer. The issue affects the environment of Node.js child processes launched under certain configurations, potentially influencing their behavior. The vulnerability does not alter the trusted-operator model of OpenClaw. A fix is available starting with version 2026.5.26. Mitigations include avoiding untrusted environment inheritance and restricting access through allowlists and disabling the affected feature if not needed.
CVSS v3.1
Score 8.1high
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The OpenClaw CLI host environment sanitizer failed to sanitize two Node.js control variables, allowing lower-trust environment inputs (e.g., workspace .env files, tool environment overrides, or skill environment blocks) to pass these variables through the shared sanitizer. This vulnerability affects versions >=2026.1.29 and <2026.5.28. When the affected feature is enabled and reachable, it can influence Node.js child processes launched with the accepted environment, depending on operator configuration and exposure to lower-trust inputs. The trusted-operator model remains unchanged. The issue is patched in version 2026.5.26.
Potential Impact
This vulnerability can lead to unintended influence over Node.js child processes via environment variables that were not properly sanitized. The impact depends on whether lower-trust environment inputs can reach the vulnerable path and the operator's configuration. The CVSS 3.1 score is 8.1 (high), indicating high confidentiality and integrity impact without availability impact. There are no known exploits in the wild.
Mitigation Recommendations
A patch is available starting with OpenClaw CLI version 2026.5.26. Until patched, avoid inheriting workspace or tool-supplied environment variables from untrusted sources. Additionally, keep channel and tool allowlists narrow, avoid sharing a Gateway between mutually untrusted users, and disable the affected feature when it is not needed.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- BREW-openclaw-cli-CVE-2026-53864
- Osv Schema Version
- 1.7.3
- Ecosystems
- ["Homebrew"]
- Cvss Version
- 3.1
Threat ID: 6ac2458912601ec6a31640ac
Added to database: 10/04/2026, 12:24:41 UTC
Last enriched: 10/04/2026, 12:34:12 UTC
Last updated: 10/04/2026, 16:08:39 UTC
Views: 1
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.