CVE-2026-100569
Received Received - Intake

OpenClaw Environment Variable Injection in Azure Speech Integration

Publication date: 2026-09-26

Last updated on: 2026-09-26

Assigner: VulnCheck

Description
OpenClaw is an npm-distributed application. In versions >= 2026.4.25 and < 2026.8.1, the workspace environment-variable filter did not block variables ending in `_ENDPOINT`, so an untrusted workspace `.env` file could set AZURE_SPEECH_ENDPOINT. Azure Speech preferred that value over the configured region, so when a synthesis or voice-list request was made, the attacker-selected endpoint received the operator's Azure Speech key in the request header, allowing the key to be reused against the operator's Azure Speech resource. Exploitation requires an operator to start OpenClaw in attacker-controlled workspace content with Azure Speech configured with a key and region and no trusted endpoint override set. The issue is fixed in 2026.8.1.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-26
Last Modified
2026-09-26
Generated
2026-09-26
AI Q&A
2026-09-26
EPSS Evaluated
N/A
NVD
CVE-2026-100569
EUVD
EUVD-2026-87482

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
openclaw openclaw From 2026.4.25 (inc) to 2026.8.1 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-522 The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-100569 is a vulnerability in OpenClaw versions between 2026.4.25 and 2026.8.1 where an attacker can expose Azure Speech credentials through a workspace endpoint override. The issue occurs because the workspace environment-variable filter did not block variables ending in _ENDPOINT, allowing an untrusted workspace .env file to set AZURE_SPEECH_ENDPOINT. Azure Speech prioritized this endpoint over the configured region, causing synthesis or voice-list requests to send the operator's Azure Speech key to the attacker-selected endpoint.

Detection Guidance

Check OpenClaw version with npm list openclaw. If version is between 2026.4.25 and 2026.8.1, the system is vulnerable. Inspect workspace .env files for variables ending in _ENDPOINT, particularly AZURE_SPEECH_ENDPOINT.

Impact Analysis

This vulnerability allows an attacker to gain access to your Azure Speech key, which could be reused against your Azure Speech resource. Exploitation requires you to start OpenClaw in attacker-controlled workspace content with Azure Speech configured using a key and region but without a trusted endpoint override. The primary impact is high confidentiality loss due to unauthorized access to credentials.

Compliance Impact

This vulnerability could lead to unauthorized access to Azure Speech credentials, potentially violating data protection requirements under GDPR and HIPAA. Exposure of API keys may result in unauthorized data processing or disclosure, which conflicts with GDPR's principles of lawfulness and transparency, and HIPAA's safeguards for protected health information.

Mitigation Strategies

Upgrade OpenClaw to version 2026.8.1 or later using npm update openclaw. Avoid running OpenClaw from untrusted workspaces. Review and remove any _ENDPOINT variables from workspace .env files.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-100569. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart