OpenClaw before 2026.3.24 allows attackers to inject malicious environment variables through workspace configuration, providing a pathway for arbitrary code execution or sensitive data exposure. The flaw is an environment variable injection (CWE‑15) that affects how the CLI backend runner spawns processes. If an attacker supplies a crafted workspace config, they can dictate which environment variables the backend process receives, potentially enabling the execution of malicious commands or the leaking of confidential information.

The vendor OpenClaw, product OpenClaw, is affected for all releases prior to 2026.3.24. The vulnerability exists in the CLI backend component and can be triggered by any workspace configuration file within the application.

The CVSS score of 8.5 indicates high severity, but no EPSS data is available and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector involves an attacker who can create or modify workspace configuration files that the CLI backend reads, typically a local user with write access to the configuration directory or an adversary who can supply configuration data through a remote interface. Successful exploitation sets arbitrary environment variables at process start, leading to code execution or data exposure.