Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenClaw before 2026.3.31 contains insufficient environment variable sanitization in host exec operations, failing to filter package, registry, Docker, compiler, and TLS override variables. Attackers can exploit this by injecting malicious environment variables to override critical system configurations and compromise host execution integrity.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-41369 Environment Variable Injection in OpenClaw Before 2026.3.31 Host Execution https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-41369
Post summary
The entry references CVE-2026-41369 as an environment variable injection in OpenClaw before 2026.3.31, but offers no details about PoC, exploit, patch or active exploitation.
⚡ New CVE Alert: CVE-2026-41369 📊 Severity: 6.5 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-41369 #CVE-2026-41369 #CVE #Medium #CyberSecurity #InfoSec https://t.co/hOGK0mSsP9
Post summary
A new CVE-2026-41369 vulnerability with medium severity is announced; no further exploitation, patch, or technical details are provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openclaw | openclaw | - | node.js | - |