| Package | Affected versions | Patched versions |
|---|---|---|
| openclaw | < 2026.5.28 | 2026.5.28 |
OpenClaw before 2026.5.28 contains a credential exposure vulnerability where workspace dotenv files can override provider credentials. Attackers with lower-trust access to configured input paths can expose sensitive data and credentials that should remain within trusted boundaries.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free