Openclaw cli: OpenClaw: Windows-compatible env override keys could bypass system.run approval binding (CVE-2026-34426)
Description
OpenClaw CLI versions up to 2026.4.1 have a vulnerability where Windows-compatible environment override keys were normalized differently during system-run approval binding compared to execution time. This discrepancy allowed approved commands to run with attacker-controlled environment overrides that were not part of the approval binding, creating an approval-integrity gap. The issue is fixed in version 2026.4.2 and later.
CVSS v4.0
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
Before OpenClaw version 2026.4.2, the system-run approval binding process normalized environment override keys differently than the host execution process, specifically omitting Windows-compatible keys from the approval binding. However, these keys could still be injected at execution time, allowing an approved command to run with environment overrides not represented in the approval binding. This caused an integrity gap in the approval mechanism for affected host execution flows. The vulnerability affects the openclaw npm package versions up to 2026.4.1 and is fixed in 2026.4.2 by aligning the approval binding with execution-time environment key normalization.
Potential Impact
An attacker could cause an approved command to execute with environment variables that were not included in the approval binding, potentially bypassing security controls that rely on the integrity of the approval binding. This undermines the trust in the approval process for system-run commands, leading to possible unauthorized environment manipulation during execution.
Mitigation Recommendations
A patch is available in OpenClaw version 2026.4.2 that fixes the normalization discrepancy. Users should upgrade to version 2026.4.2 or later to remediate this vulnerability. Until the patched version is released and available, no other vendor advisory mitigation is provided.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- BREW-openclaw-cli-CVE-2026-34426
- Osv Schema Version
- 1.7.3
- Ecosystems
- ["Homebrew"]
- Cvss Version
- 4.0
Threat ID: 6ac245b112601ec6a3166b23
Added to database: 10/04/2026, 12:25:21 UTC
Last enriched: 10/04/2026, 12:57:32 UTC
Last updated: 10/04/2026, 16:08:37 UTC
Views: 1
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.