CVE-2026-41368
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
OpenClaw before 2026.3.28 has an environment variable disclosure vulnerability in the jq safe-bin policy. The $ENV filter is not blocked, allowing attackers to read sensitive environment variables.
Risk Assessment
An attacker can access confidential environment variables such as passwords or API keys, potentially leading to further system compromise.
Recommendation
Update OpenClaw to version 2026.3.28 or later, which blocks the $ENV filter in the safe-bin policy.
Original NVD description (English source)
OpenClaw before 2026.3.28 contains an environment variable disclosure vulnerability in the jq safe-bin policy that fails to block the $ENV filter. Attackers can bypass safe-bin restrictions by using $ENV in jq programs to access sensitive environment variables that should be restricted.