Openclaw cli: OpenClaw: PIP_INDEX_URL and UV_INDEX_URL bypass host exec env sanitization and redirect Python package-index traffic (CVE-2026-41391)

CVE-2026-41391 describes a vulnerability in the openclaw-cli npm package where the environment variables PIP_INDEX_URL and UV_INDEX_URL bypass host execution environment sanitization. This allows redirection of Python package-index traffic, potentially impacting the integrity of package management operations. The vulnerability is limited in scope to approved or allowlisted package-management execution paths and does not allow arbitrary remote code execution. Versions from 2026.1.29 up to 2026.3.31 are affected. The issue was fixed in version 2026.3.31 by commit 7ae1bb0c7799fd0cbd2d4de7b0f5b8039837ab8d.

The vulnerability allows an attacker with limited privileges to redirect Python package-index traffic by bypassing environment sanitization. This could lead to integrity issues in package management, such as installing packages from unauthorized sources. The CVSS 3.1 score is 5.3 (medium), reflecting low confidentiality impact, high integrity impact, and no availability impact. The attack vector requires local access with low privileges and high attack complexity.

A patch is available and should be applied by upgrading openclaw-cli to version 2026.3.31 or later. This update addresses the environment variable sanitization bypass. Users should ensure they are not running vulnerable versions (>=2026.1.29 <2026.3.31). No additional mitigation actions are specified by the vendor.