Environment Variable Override Vulnerability in OpenClaw by OpenClaw

CVE-2026-41330

What is CVE-2026-41330?

OpenClaw versions prior to 2026.3.31 exhibit a serious vulnerability that allows attackers to exploit environment variables in a way that circumvents security measures linked to proxy settings, TLS verification, Docker restrictions, and Git TLS enforcement. By overriding these environment variables, malicious actors can gain unauthorized access and control, bypassing essential security protocols designed to safeguard the system. Organizations using affected versions should upgrade immediately to mitigate risks.

References