AI agent vulnerability · OpenClaw

CVE-2026-44992: OpenClaw: Workspace dotenv MiniMax host override could redirect credentialed requests

mediumCVSS 4.0 6.8GHSA-h2vw-ph2c-jvwf

Affected Packages / Versions - Package: openclaw (npm) - Affected versions: = 2026.4.5, < 2026.4.20 - Patched version: 2026.4.20 Impact A malicious workspace .env could set MINIMAXAPIHOST and redirect credentialed MiniMax requests to an attacker-controlled origin, exposing the MiniMax API key in the outbound Authorization header. This requires running OpenClaw from an attacker-controlled workspace.

Published Apr 25, 2026 · Updated May 19, 2026

Affected packages

openclaw

Ecosystem: npm
Affected: >= 2026.4.5, < 2026.4.20
Fixed in: 2026.4.20
Check: npm ls openclaw

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

Affected Packages / Versions

Package: openclaw (npm)
Affected versions: >= 2026.4.5, < 2026.4.20
Patched version: 2026.4.20

Impact

A malicious workspace .env could set MINIMAX_API_HOST and redirect credentialed MiniMax requests to an attacker-controlled origin, exposing the MiniMax API key in the outbound Authorization header.

This requires running OpenClaw from an attacker-controlled workspace. Severity is medium.

Fix

OpenClaw now blocks MINIMAX_API_HOST from workspace dotenv injection and removes env-driven URL routing from the affected MiniMax request path.

Fix commit:

2f06696579a1ab0cb5bbbbb6a900414a6b2e3cd1

Release

Fixed in OpenClaw 2026.4.20.

Credited to nexrin.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More OpenClaw vulnerabilities

All OpenClaw entries