Openclaw cli: OpenClaw's incomplete host env sanitization blocklist allows supply-chain redirection via package-manager env overrides (CVE-2026-41387)

OpenClaw CLI's host execution environment override sanitization did not fail closed for several package-manager and related redirect variables. This allowed approved execution requests to silently redirect dependency fetches or runtime bootstrap to attacker-controlled infrastructure, enabling execution of trojanized content. The issue affected the components src/infra/host-env-security-policy.json and src/infra/host-env-security.ts. The vulnerability is addressed by commit 7abfff756d, which hardens host environment override handling across gateway and node. Versions prior to 2026.3.22 are affected.

An attacker can exploit this vulnerability to redirect package resolution or runtime bootstrap processes to attacker-controlled infrastructure, leading to execution of malicious trojanized content. This can compromise confidentiality, integrity, and availability of the affected system. The CVSS score of 9.6 reflects critical severity with network attack vector, low attack complexity, no privileges required, user interaction required, scope change, and high impact on confidentiality, integrity, and availability.

A patch is available and should be applied. The vulnerability is fixed in OpenClaw CLI version 2026.3.22 and later. Users should upgrade to version 2026.3.22 or newer to mitigate this issue.