CyberRota Analysis
AI-GeneratedOpenClaw versions prior to 2026.5.28 are vulnerable to a credential exposure issue, allowing attackers with lower-trust access to manipulate workspace dotenv files and potentially access sensitive provider credentials. This vulnerability poses a significant risk to data confidentiality and integrity, making it critical for organizations using OpenClaw to prioritize immediate updates to mitigate potential data breaches.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
OpenClaw before 2026.5.28 contains a credential exposure vulnerability where workspace dotenv files can override provider credentials. Attackers with lower-trust access to configured input paths can expose sensitive data and credentials that should remain within trusted boundaries.
Related CVEs
Other vulnerabilities affecting the same vendor(s)