Openclaw cli: OpenClaw: Workspace dotenv MiniMax host override could redirect credentialed requests (CVE-2026-44992)
Description
OpenClaw CLI versions from 2026.4.7 up to but not including 2026.4.20 are vulnerable to an environment variable injection issue where a malicious workspace .env file can override the MINIMAX_API_HOST. This can redirect credentialed MiniMax API requests to an attacker-controlled server, exposing the API key in the Authorization header. The vulnerability requires running OpenClaw from an attacker-controlled workspace. The issue is fixed in version 2026.4.20.
CVSS v4.0
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The OpenClaw CLI package (npm) versions >=2026.4.7 and <2026.4.20 allow a malicious workspace .env file to set the MINIMAX_API_HOST environment variable, causing credentialed MiniMax API requests to be redirected to an attacker-controlled origin. This exposes the MiniMax API key in the outbound Authorization header. The vulnerability requires the attacker to control the workspace from which OpenClaw is run. The fix, committed in 2f06696579a1ab0cb5bbbbb6a900414a6b2e3cd1 and released in version 2026.4.20, blocks MINIMAX_API_HOST from workspace dotenv injection and removes environment-driven URL routing for the affected MiniMax request path.
Potential Impact
An attacker who controls the workspace can redirect MiniMax API requests containing sensitive API keys to a malicious server, leading to credential exposure. This could compromise the confidentiality of the MiniMax API key used by OpenClaw. The attack requires local control of the workspace environment, limiting the attack surface. The severity is assessed as medium.
Mitigation Recommendations
Users should upgrade OpenClaw CLI to version 2026.4.20 or later, where the vulnerability is fixed. The fix prevents environment variable injection of MINIMAX_API_HOST and removes environment-driven URL routing for MiniMax requests. No additional mitigation is required if the updated version is deployed.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- BREW-openclaw-cli-CVE-2026-44992
- Osv Schema Version
- 1.7.3
- Ecosystems
- ["Homebrew"]
- Cvss Version
- 4.0
Threat ID: 6ac2459012601ec6a31641e9
Added to database: 10/04/2026, 12:24:48 UTC
Last enriched: 10/04/2026, 12:39:40 UTC
Last updated: 10/04/2026, 16:08:38 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.