Openclaw cli: OpenClaw: Workspace .env STATE_DIRECTORY could influence bundled runtime dependency roots (CVE-2026-53858)

The vulnerability CVE-2026-53858 in openclaw-cli arises from the ability of a workspace .env file to set the STATE_DIRECTORY environment variable before runtime dependency root resolution. This can cause the system to load bundled runtime dependencies from unintended local state paths if the feature is enabled and the workspace is opened by a trusted operator. The impact depends on the operator's configuration and whether lower-trust inputs can influence the path. The trusted-operator model remains intact, meaning only authenticated Gateway operators and installed plugins are trusted unless additional policy boundaries are crossed. The issue is fixed starting with openclaw-cli version 2026.5.2.

If exploited, this vulnerability could lead to loading runtime dependencies from unintended local paths, potentially allowing an attacker to influence the runtime environment. The severity is high with a CVSS score of 7.1, indicating a significant confidentiality and integrity impact without availability impact. The practical impact depends on the operator's configuration and trust boundaries, as well as whether untrusted inputs can affect the STATE_DIRECTORY path.

A patch is available in openclaw-cli version 2026.5.2. Until patched, users should avoid opening untrusted workspace .env files before runtime dependency installation. Additional mitigations include maintaining narrow channel and tool allowlists, avoiding sharing a Gateway between mutually untrusted users, and disabling the affected feature when it is not needed.