Report: CVE-2026-43531 - OpenClaw < 2026.4.9 - Environment Variable Injection via Workspace .env File

Report: CVE-2026-43531 - OpenClaw < 2026.4.9 - Environment Variable Injection via Workspace .env File

CVE ID :CVE-2026-43531 Published : May 5, 2026, 11:25 a.m. | 57 minutes ago Description :OpenClaw before 2026.4.9 contains an environment variable injection vulnerability allowing malicious workspace .env files to set runtime-control variables. Attackers can inject variables affecting update sources, gateway URLs, ClawHub resolution, and browser executable paths to compromise application behavior. Severity: 7.3 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
HIGH
Published
May 5, 2026