OpenClaw before 2026.3.28 loads the current working directory .env file before establishing a trusted configuration state, allowing an attacker to inject environment variables. By placing a crafted .env file in a repository or workspace, the attacker can override runtime configuration and security‑sensitive settings during startup, potentially compromising the application’s integrity and confidentiality.

Version OpenClaw < 2026.3.28 is affected. Any deployment that loads a .env file from the working directory without prior validation of a trusted configuration is vulnerable.

The CVSS score of 8.5 indicates high severity. EPSS score is not available, so the exploitation probability cannot be quantified. The vulnerability is not listed in CISA KEV. Based on the description, the likely attack vector is a local or repository‑based injection where an attacker can write a malicious .env file prior to OpenClaw startup. Once the injected variables are applied, the attacker could alter critical configuration such as database credentials, SSL settings, or execution flags, which could lead to unauthorized data access or arbitrary code execution.