OpenClaw versions prior to 2026.4.9 are vulnerable to a security issue where a malicious workspace .env file can inject runtime-control variables. This can alter critical runtime behaviors such as update sources, gateway URLs, ClawHub resolution, and browser executable paths. The vulnerability is addressed by blocking these runtime-control keys from being loaded from workspace .env files. A fix is available starting from version 2026.4.9.