OpenClaw: Workspace dotenv MiniMax host override could redirect credentialed requests

中 5.0CVE-2026-44992 · GHSA-h2vw-ph2c-jvwf · 11/05/2026 公開 · 17/06/2026 更新

要点

CVE-2026-44992 は openclaw (openclaw), openclaw に影響する深刻度「中」 (CVSS 5.0) の脆弱性です。
今後30日間に悪用される確率（EPSS）：0.12%（全脆弱性の 1.7% より高い）。
対処：2026.4.20 以降に更新してください。

パッケージ	影響を受けるバージョン	修正済みバージョン
openclaw openclaw	`≥ 2026.4.5, < 2026.4.20`	`2026.4.20`
openclaw npm	`≥ 2026.4.5, < 2026.4.20`	`2026.4.20`

概要

Affected Packages / Versions

Package: openclaw (npm)
Affected versions: >= 2026.4.5, < 2026.4.20
Patched version: 2026.4.20

Impact

A malicious workspace .env could set MINIMAX_API_HOST and redirect credentialed MiniMax requests to an attacker-controlled origin, exposing the MiniMax API key in the outbound Authorization header.

This requires running OpenClaw from an attacker-controlled workspace. Severity is medium.

Fix

OpenClaw now blocks MINIMAX_API_HOST from workspace dotenv injection and removes env-driven URL routing from the affected MiniMax request path.

Fix commit:

2f06696579a1ab0cb5bbbbb6a900414a6b2e3cd1

Release

Fixed in OpenClaw 2026.4.20.

NVD の説明

OpenClaw versions 2026.4.5 before 2026.4.20 contain an environment variable injection vulnerability allowing workspace dotenv to override MINIMAX_API_HOST. Attackers can redirect credentialed MiniMax API requests to attacker-controlled origins, exposing the MiniMax API key in Authorization headers.