CVE-2026-101884: OpenClaw Windows Node before 2026.7.1 Remote Code Execution via Environment Override
OpenClaw Windows Node before 2026.7.1 contains an incomplete environment-variable sanitizer in system.run that fails to block GITCONFIG, DOTNETSTARTUPHOOKS, and JAVATOOLOPTIONS variables. Attackers with gateway or agent access can supply these variables to allowlisted tools like git, dotnet, or java to load attacker-controlled code and achieve arbitrary code execution.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
OpenClaw Windows Nodeto a version that resolves this vulnerability.Fixed in 2026.7.1
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker needs gateway or agent access to an affected OpenClaw Windows Node and must be able to supply environment variables to system.run. The attack targets allowlisted executions of git, dotnet, or java.
Which environment variables enable code execution?
The incomplete sanitizer does not block GIT_CONFIG_*, DOTNET_STARTUP_HOOKS, or JAVA_TOOL_OPTIONS. These variables can cause the corresponding allowlisted tool to load attacker-controlled code.
How can I determine whether a node is affected?
OpenClaw Windows Node versions before 2026.7.1 are affected. Review system.run activity and any gateway or agent requests that supplied GIT_CONFIG_*, DOTNET_STARTUP_HOOKS, or JAVA_TOOL_OPTIONS values to git, dotnet, or java.