{"id":"CVE-2026-101884","published":"2026-09-30T20:17:20.663","lastModified":"2026-10-01T02:20:29.877","description":"OpenClaw Windows Node before 2026.7.1 contains an incomplete environment-variable sanitizer in system.run that fails to block GIT_CONFIG_*, DOTNET_STARTUP_HOOKS, and JAVA_TOOL_OPTIONS variables. Attackers with gateway or agent access can supply these variables to allowlisted tools like git, dotnet, or java to load attacker-controlled code and achieve arbitrary code execution.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-184"],"vendors":[],"products":[],"references":[{"url":"https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/ExecEnvSanitizer.cs#L15-L50","tags":[]},{"url":"https://github.com/openclaw/openclaw-windows-node/commit/261ba11aaad671834ad141bb85101b50cf1a38f6","tags":[]},{"url":"https://github.com/openclaw/openclaw-windows-node/releases/tag/v2026.7.1","tags":[]},{"url":"https://github.com/openclaw/openclaw-windows-node/security/advisories/GHSA-39cf-qcfw-g8pg","tags":[]},{"url":"https://www.vulncheck.com/advisories/openclaw-windows-node-before-2026.7.1-remote-code-execution-via-environment-override","tags":[]},{"url":"https://github.com/openclaw/openclaw-windows-node/security/advisories/GHSA-39cf-qcfw-g8pg","tags":[]}],"exploitRefs":[{"url":"https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Shared/ExecEnvSanitizer.cs#L15-L50","tags":[]},{"url":"https://github.com/openclaw/openclaw-windows-node/commit/261ba11aaad671834ad141bb85101b50cf1a38f6","tags":[]},{"url":"https://github.com/openclaw/openclaw-windows-node/releases/tag/v2026.7.1","tags":[]},{"url":"https://github.com/openclaw/openclaw-windows-node/security/advisories/GHSA-39cf-qcfw-g8pg","tags":[]},{"url":"https://github.com/openclaw/openclaw-windows-node/security/advisories/GHSA-39cf-qcfw-g8pg","tags":[]}],"hasPoc":true,"ai":{"summary":"The flaw is an incomplete environment variable sanitizer in OpenClaw Windows Node that fails to block critical variables like GIT_CONFIG_* and DOTNET_STARTUP_HOOKS, allowing attackers with gateway or agent access to inject malicious code into allowed tools like git, dotnet, and java, leading to arbitrary code execution.","exploitability":"Exploitation requires gateway or agent access and is moderately difficult due to the need to craft environment variables that bypass the sanitizer, but once achieved, allows full code execution through the allowed tools.","blast_radius":"If exploited, attackers could execute arbitrary code on systems running OpenClaw Windows Node versions prior to 2026.7.1, potentially leading to complete system compromise and lateral movement within the network.","remediation":"Upgrade to OpenClaw Windows Node version 2026.7.1 or later to fix the environment variable sanitization issue.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","environment","windows"],"model":"garnet-coder","analyzedAt":"2026-10-13T09:08:42.140Z"}}