Staging Environment: Content and features may be unstable or change without notice.
Advisory details: github_osv / GHSA-3qpv-xf3v-mm45
Advisory ID github_osv/GHSA-3qpv-xf3v-mm45
Aliases CVE-2026-41336
Summary OpenClaw: Workspace `.env` can override the bundled hooks root and load attacker hook code ## Summary Workspace `.env` can override the bundled hooks root and load attacker hook code ## Current Maintainer Triage - Status: open - Normalized severity: high - Assessment: v2026.3.28 still lets workspace .env override OPENCLAW_BUNDLED_HOOKS_DIR, which can replace trusted default-on bundled hooks from an untrusted workspace. ## Affected Packages / Versions - Package: `openclaw` (npm) - Latest published npm version: `2026.3.31` - Vulnerable version range: `<=2026.3.28` - Patched versions: `>= 2026.3.31` - First stable tag containing the fix: `v2026.3.31` ## Fix Commit(s) - `330a9f98cb29c79b1c16a2117e03d6276a0d6289` — 2026-03-31T19:25:12+09:00 OpenClaw thanks @nexrin for reporting.
Status Published
Exploitability 0.5
Weighted Severity 7.7
Risk 3.9
Affected and Fixed Packages Package Details
Introduced and Fixed Package Commit Patches Package Commit Patches Details
Weaknesses (2)
CWE-829 Inclusion of Functionality from Untrusted Control Sphere
CWE-15 External Control of System or Configuration Setting
System Score Found at
cvssv3.1 7.8 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/04/GHSA-3qpv-xf3v-mm45/GHSA-3qpv-xf3v-mm45.json
cvssv4 8.5 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/04/GHSA-3qpv-xf3v-mm45/GHSA-3qpv-xf3v-mm45.json
generic_textual HIGH
Reference id Reference type URL
https://github.com/openclaw/openclaw
https://github.com/openclaw/openclaw/commit/330a9f98cb29c79b1c16a2117e03d6276a0d6289
https://github.com/openclaw/openclaw/releases/tag/v2026.3.31
https://github.com/openclaw/openclaw/security/advisories/GHSA-3qpv-xf3v-mm45
https://www.vulncheck.com/advisories/openclaw-arbitrary-hook-code-execution-via-openclaw-bundled-hooks-dir-environment-variable-override
CVE-2026-41336 https://nvd.nist.gov/vuln/detail/CVE-2026-41336
No exploits are available.

No EPSS data available for this advisory.

Patch URL
There are no known patches.
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/04/GHSA-3qpv-xf3v-mm45/GHSA-3qpv-xf3v-mm45.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Found at https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/04/GHSA-3qpv-xf3v-mm45/GHSA-3qpv-xf3v-mm45.json
Attack Vector (AV) Attack Complexity (AC) Attack Requirements (AT) Privileges Required (PR) User Interaction (UI) Vulnerable System Impact Confidentiality (VC) Vulnerable System Impact Integrity (VI) Vulnerable System Impact Availability (VA) Subsequent System Impact Confidentiality (SC) Subsequent System Impact Integrity (SI) Subsequent System Impact Availability (SA)

network

adjacent

local

physical

low

high

none

present

none

low

high

none

passive

active

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

There are no SSVC decisions available.