CVE-2026-53864: OpenClaw < 2026.5.26 - Insufficient Environment Variable Sanitization in Node.js Control Variables
Summary
Host environment sanitizer missed two Node.js control variables. In affected versions, a lower-trust env source such as a workspace .env, tool env override, or skill env block could pass Node.js control variables through the shared sanitizer.
This advisory is scoped to the named feature and configuration. It does not change OpenClaw's trusted-operator model: authenticated Gateway operators, installed plugins, and intentional local execution surfaces remain trusted unless a separate policy, approval, allowlist, sandbox, or auth boundary is crossed.
Impact
When the affected feature is enabled and reachable, this could influence a later Node.js child process or coverage output path when that process is launched under the accepted environment. Practical impact depends on the operator's configuration and whether lower-trust input can reach that path.
Patched Versions
The first stable patched version is 2026.5.26.
Mitigations
avoid inheriting workspace or tool-supplied env values from untrusted repositories until patched. As general hardening, keep channel and tool allowlists narrow, avoid sharing one Gateway between mutually untrusted users, and disable the affected feature when it is not needed.
Other sources
OpenClaw before 2026.5.26 contains an insufficient sanitization vulnerability in the host environment sanitizer that allows Node.js control variables to bypass validation. Attackers with access to workspace .env files, tool environment overrides, or skill environment blocks can pass malicious Node.js control variables to influence child processes or coverage output paths.
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
npm/openclawto a version that resolves this vulnerability.Fixed in 2026.5.26 - Configuration
Disable the affected host environment feature (the OpenClaw feature that ingests workspace/tool/skill environment blocks and passes Node.js control variables) when it is not required.
OpenClaw affected_feature_enabled = false - Compensating control
Until patched, avoid inheriting workspace or tool-supplied environment values from untrusted repositories. Keep channel and tool allowlists narrow and avoid sharing a single Gateway between mutually untrusted users to reduce the risk that lower-trust inputs can influence Node.js child processes or coverage paths.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-53864?
CVE-2026-53864 has a severity rating of 8.1, categorized as high.
How do I fix CVE-2026-53864?
To fix CVE-2026-53864, upgrade OpenClaw to version 2026.5.26 or later.
What kind of attacks are possible with CVE-2026-53864?
CVE-2026-53864 allows attackers to bypass validation of Node.js control variables through insufficient sanitization.
Who is affected by CVE-2026-53864?
Users of OpenClaw versions prior to 2026.5.26 are affected by CVE-2026-53864.
How does CVE-2026-53864 impact Node.js applications?
CVE-2026-53864 can lead to security breaches in Node.js applications by allowing malicious input through environment variables.