CVE-2026-100570
Received Received - Intake

Environment Variable Injection in OpenClaw npm Package

Publication date: 2026-09-26

Last updated on: 2026-09-26

Assigner: VulnCheck

Description
OpenClaw (npm package 'openclaw') versions >= 2026.3.28 and < 2026.8.1 allow an untrusted workspace .env file to set the CLOUDSDK_PYTHON_ARGS environment variable. When an operator starts OpenClaw in attacker-controlled workspace content and then runs the Gmail setup flow, that value is inherited when gcloud is launched, and the gcloud launcher passes it as arguments to the trusted Python interpreter. A crafted CLOUDSDK_PYTHON_ARGS value can therefore cause Python to execute attacker-supplied code with the OpenClaw host user's permissions, allowing credentials to be read, files to be modified, or other processes to be started. This issue is fixed in version 2026.8.1; as a workaround, run Gmail setup only from trusted workspaces and clear inherited CLOUDSDK_* variables beforehand.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-26
Last Modified
2026-09-26
Generated
2026-09-26
AI Q&A
2026-09-26
EPSS Evaluated
N/A
NVD
CVE-2026-100570
EUVD
EUVD-2026-87481

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
openclaw openclaw From 2026.3.28 (inc) to 2026.8.1 (exc)
openclaw openclaw 2026.8.1

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-88 The product constructs a string for a command to be executed by a separate component in another control sphere, but it does not properly delimit the intended arguments, options, or switches within that command string.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability affects the npm package 'openclaw' versions between 2026.3.28 and below 2026.8.1. An attacker can exploit it by placing a malicious .env file in a workspace that sets the CLOUDSDK_PYTHON_ARGS environment variable. When OpenClaw runs in this workspace and the Gmail setup flow is triggered, the variable is passed to the Python interpreter via the gcloud launcher. This allows the attacker to execute arbitrary code with the permissions of the OpenClaw user, potentially leading to credential theft, file modification, or process execution.

Detection Guidance

Check OpenClaw version with 'npm list openclaw' or 'openclaw --version'. Inspect workspace .env files for CLOUDSDK_PYTHON_ARGS. Monitor environment variables during Gmail setup flow for suspicious values.

Impact Analysis

If exploited, this vulnerability could allow an attacker to run malicious code on your system with your user permissions. This may result in unauthorized access to sensitive data like credentials, modification or deletion of files, or launching additional malicious processes. The impact depends on the privileges of the OpenClaw user account.

Compliance Impact

This vulnerability could lead to credential theft, file modification, or unauthorized process execution, which may violate data protection requirements under GDPR (e.g., unauthorized access to personal data) and HIPAA (e.g., unauthorized access to protected health information). Organizations using OpenClaw in regulated environments must ensure proper controls are in place to prevent such code execution.

Mitigation Strategies

Upgrade OpenClaw to version 2026.8.1 or later. Avoid running Gmail setup in untrusted workspaces. Clear inherited CLOUDSDK_* variables before running OpenClaw.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-100570. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart