https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-02T14:36:25.870497+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/brew-openclaw-cli-cve-2026-4039 BREW-openclaw-cli-CVE-2026-4039 — OpenClaw: Skill env override host env injection via applySkillConfigEnvOverrides (defense-in-depth) 2026-10-02T14:36:25.872248+00:00

Affected: Homebrew: openclaw-cli

### Summary `applySkillConfigEnvOverrides` previously copied `skills.entries.*.env` values into the host `process.env` without applying the host env safety policy.

### Impact In affected versions, dangerous process-level variables such as `NODE_OPTIONS` could be injected when unset, which can influence runtime/child-process behavior.

### Required attacker capability An attacker must be able to modify OpenClaw local state/config (for example `~/.openclaw/openclaw.json`) to set `skills.entries.<skill>.env` or related skill config values.

### Remediation Fixed in `2026.2.21` by sanitizing skill env overrides and blocking dangerous host env keys (including `NODE_OPTIONS`) before applying overrides, with regression tests covering blocked dangerous keys.

## Fix Commit(s) - `8c9f35cdb51692b650ddf05b259ccdd75cc9a83c`

Found using [MCPwner](https://github.com/Pigyon/MCPwner)

 https://vulnerability.circl.lu/vuln/cve-2026-4039 CVE-2026-4039 — OpenClaw Skill Env applySkillConfigenvOverrides code injection 2026-10-02T14:36:25.872350+00:00

Affected: OpenClaw

A vulnerability was determined in OpenClaw 2026.2.19-2. This vulnerability affects the function applySkillConfigenvOverrides of the component Skill Env Handler. Executing a manipulation can lead to code injection. It is possible to launch the attack remotely. Upgrading to version 2026.2.21-beta.1 is able to resolve this issue. This patch is called 8c9f35cdb51692b650ddf05b259ccdd75cc9a83c. It is recommended to upgrade the affected component.