CyberRota Analysis
AI-GeneratedOpenClaw versions prior to 2026.6.6 are vulnerable due to inadequate filtering of interpreter startup variables in the host execution environment. This flaw allows lower-trust callers to supply malicious environment variables, potentially enabling unauthorized actions or persistence. Organizations using affected versions should prioritize patching to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
OpenClaw versions before 2026.6.6 contain a flaw in host exec environment filtering that can miss interpreter startup variables. When the affected feature is enabled and reachable, a lower-trust caller or configured input path can supply crafted environment variables to execute or persist actions beyond the caller's intended authorization.
Related CVEs
Other vulnerabilities affecting the same vendor(s)