GHSA-vfp4-8x56-j7c5: OpenClaw: Exec environment denylist missed high-risk interpreter startup variables

Summary

OpenClaw's exec environment policy did not block interpreter startup variables such as VIMINIT, EXINIT, LUA_INIT and HOSTALIASES. Operator-supplied overrides of these variables could influence downstream execution or network behavior in affected versions below 2026.4.10. The fix expands the host environment security policy denylist to cover these and related high-risk variables.

Mitigation

Upgrade openclaw to 2026.4.10 or newer. The fix is in #63277 and the latest npm release, 2026.4.14, already includes it.

Related items

• MediumAnthropic 'SneakPeek' Flaw Is a Silent Zero-Click ThreatSimilar attack · Dark Reading
• HighCVE-2026-104103: Ludwig archive extraction allows writes outside extraction directorySimilar attack · NVD/CVE Database
• InfoFrom Training to Escalation: Forensic Analysis and Local Recreation of RL/RLHF-Induced Privilege Escalation in AI Agents (CVE-2026-65616)Similar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• HighCVE-2026-110719: Portkey AI Gateway server-side request forgery via x-portkey-custom-host headerSimilar attack · NVD/CVE Database
• MediumAI Agents Navigate Unfamiliar OT Systems and Move Equipment in Minutes, Booz Allen FindsSimilar attack · SecurityWeek