High severity7.3NVD Advisory· Published May 11, 2026· Updated May 13, 2026
CVE-2026-44995
CVE-2026-44995
Description
OpenClaw before 2026.4.20 contains an improper environment variable validation vulnerability in MCP stdio server configuration that allows attackers to execute arbitrary code. Malicious workspace configurations can pass dangerous startup variables like NODE_OPTIONS, LD_PRELOAD, or BASH_ENV to spawned MCP server processes, enabling code injection when operators start sessions using those servers.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
openclawnpm | < 2026.4.20 | 2026.4.20 |
Affected products
3Patches
Vulnerability mechanics
References
6- github.com/openclaw/openclaw/commit/62fa5071896e95edc7f67d1cebc70a2859e283afnvdPatchWEB
- github.com/advisories/GHSA-mj59-h3q9-ghfhghsaADVISORY
- github.com/openclaw/openclaw/security/advisories/GHSA-mj59-h3q9-ghfhnvdThird Party AdvisoryWEB
- nvd.nist.gov/vuln/detail/CVE-2026-44995ghsaADVISORY
- www.vulncheck.com/advisories/openclaw-arbitrary-code-execution-via-mcp-stdio-environment-variablesnvdThird Party AdvisoryPatchWEB
- github.com/openclaw/openclaw/commit/85d86ebc4bf3d2226d39d132a484f4f7a299fa1bnvdBroken LinkWEB
News mentions
0No linked articles in our index yet.