CVE-2026-59261— OpenClaw < 2026.5.28 - Credential Override via Workspace Dotenv Files
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-59261
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
OpenClaw < 2026.5.28 - Credential Override via Workspace Dotenv Files
Source: NVD (National Vulnerability Database)
Vulnerability Description
OpenClaw before 2026.5.28 contains a credential exposure vulnerability where workspace dotenv files can override provider credentials. Attackers with lower-trust access to configured input paths can expose sensitive data and credentials that should remain within trusted boundaries.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
不完整的黑名单
Source: NVD (National Vulnerability Database)
Vulnerability Title
OpenClaw 输入验证错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
OpenClaw是OpenClaw团队开源的一个智能人工助理。 OpenClaw 2026.5.28之前版本存在输入验证错误漏洞，该漏洞源于工作区dotenv文件可以覆盖提供者凭证，导致凭证暴露。攻击者通过低信任度访问配置的输入路径，可能暴露敏感数据和凭证。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-59261
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-59261
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-59261 (2)
IV. Related Vulnerabilities
Same product: OpenClaw
- CVE-2026-53866
OpenClaw < 2026.5.12 - Allowlist Bypass in Shell Inline-Comm - CVE-2026-53865
OpenClaw < 2026.5.2 - Arbitrary Command Execution via Works - CVE-2026-53864
OpenClaw < 2026.5.26 - Insufficient Environment Variable San - CVE-2026-53862
OpenClaw < 2026.5.12 - Bootstrap Token Replay via Pending Pa - CVE-2026-53863
OpenClaw < 2026.4.25 - Unvalidated Group ID Acceptance in To
Same vendor: OpenClaw
- CVE-2026-53865
OpenClaw < 2026.5.2 - Arbitrary Command Execution via Works - CVE-2026-53866
OpenClaw < 2026.5.12 - Allowlist Bypass in Shell Inline-Comm - CVE-2026-53864
OpenClaw < 2026.5.26 - Insufficient Environment Variable San - CVE-2026-53862
OpenClaw < 2026.5.12 - Bootstrap Token Replay via Pending Pa - CVE-2026-53863
OpenClaw < 2026.4.25 - Unvalidated Group ID Acceptance in To
Same weakness: CWE-184
- CVE-2026-55830
RestrictedPython guard hooks can be shadowed via positional- - CVE-2026-14534
Fickling check_safety() bypass via unlisted standard library - CVE-2026-56777
n8n - AST Validator Bypass in Python Code Node - CVE-2025-71355
Picklescan - Arbitrary Code Execution via Unsafe Numpy Funct - CVE-2026-47389
Mastodon: SSRF protection bypass on older Ruby versions
V. Comments for CVE-2026-59261
No comments yet