Опубликовано: 02 апр. 2026
Источник: github
Github: Прошло ревью
CVSS4: 8.5
CVSS3: 7.8
Описание
OpenClaw: Workspace .env can override the bundled hooks root and load attacker hook code
Summary
Workspace .env can override the bundled hooks root and load attacker hook code
Current Maintainer Triage
- Status: open
- Normalized severity: high
- Assessment: v2026.3.28 still lets workspace .env override OPENCLAW_BUNDLED_HOOKS_DIR, which can replace trusted default-on bundled hooks from an untrusted workspace.
Affected Packages / Versions
- Package:
openclaw(npm) - Latest published npm version:
2026.3.31 - Vulnerable version range:
<=2026.3.28 - Patched versions:
>= 2026.3.31 - First stable tag containing the fix:
v2026.3.31
Fix Commit(s)
330a9f98cb29c79b1c16a2117e03d6276a0d6289— 2026-03-31T19:25:12+09:00
OpenClaw thanks @nexrin for reporting.
Ссылки
- https://github.com/openclaw/openclaw/security/advisories/GHSA-3qpv-xf3v-mm45
- https://nvd.nist.gov/vuln/detail/CVE-2026-41336
- https://github.com/openclaw/openclaw/commit/330a9f98cb29c79b1c16a2117e03d6276a0d6289
- https://github.com/openclaw/openclaw/releases/tag/v2026.3.31
- https://www.vulncheck.com/advisories/openclaw-arbitrary-hook-code-execution-via-openclaw-bundled-hooks-dir-environment-variable-override
Пакеты
Наименование
openclaw
npm
Затронутые версииВерсия исправления
<= 2026.3.28
2026.3.31
Связанные уязвимости
CVSS3: 7.8
nvd
5 месяцев назад
OpenClaw before 2026.3.31 allows workspace .env files to override the OPENCLAW_BUNDLED_HOOKS_DIR environment variable, enabling loading of attacker-controlled hook code. Attackers can replace trusted default-on bundled hooks from untrusted workspaces to execute arbitrary code.