Report: CVE-2026-44114 - OpenClaw Namespace Pollution Vulnerability

Report: CVE-2026-44114 - OpenClaw Namespace Pollution Vulnerability

CVE ID :CVE-2026-44114 Published : May 6, 2026, 8:16 p.m. | 22 minutes ago Description :OpenClaw before 2026.4.20 fails to properly reserve the OPENCLAW_ runtime-control environment namespace in workspace dotenv files, allowing attackers to override critical runtime variables. Malicious workspaces can set variables like OPENCLAW_GIT_DIR to manipulate trusted OpenClaw runtime behavior during source-update or installer flows. Severity: 8.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
CRITICAL
Published
May 6, 2026