GHSA-h2vw-ph2c-jvwf — medium GitHub Advisory (CVE-2026-44992) in npm/openclaw

Description

Affected Packages / Versions

Package: openclaw (npm)
Affected versions: >= 2026.4.5, < 2026.4.20
Patched version: 2026.4.20

Impact

A malicious workspace .env could set MINIMAX_API_HOST and redirect credentialed MiniMax requests to an attacker-controlled origin, exposing the MiniMax API key in the outbound Authorization header.

This requires running OpenClaw from an attacker-controlled workspace. Severity is medium.

Fix

OpenClaw now blocks MINIMAX_API_HOST from workspace dotenv injection and removes env-driven URL routing from the affected MiniMax request path.

Fix commit:

2f06696579a1ab0cb5bbbbb6a900414a6b2e3cd1

Release

Fixed in OpenClaw 2026.4.20.

Basic information

Type: reviewed
Severity: medium
Advisory on GitHub: Open advisory ↗
Repository advisory: Open repository advisory ↗
Source code: Browse source ↗
Published (advisory): 2026-04-25 23:50:10 UTC
Updated: 2026-05-19 15:56:14 UTC
GitHub reviewed: 2026-04-25 23:50:10 UTC

Score	Percentile
0.01%	1.20%

CVSS Scores

Base score	Version	Severity	Vector
6.8	4.0	—	`CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N` Click to expand Attack vector (AV:L) Attacker needs local access on the target system. Attack complexity (AC:L) Exploitation conditions are straightforward and stable. Attack requirements (AT:P) Additional preconditions must be present for exploitation. Privileges required (PR:N) No privileges are required. User interaction (UI:P) A user has to participate (for example click/open/approve). Vulnerable system confidentiality impact (VC:H) High confidentiality impact on the vulnerable system. Vulnerable system integrity impact (VI:N) No integrity impact on the vulnerable system. Vulnerable system availability impact (VA:N) No availability impact on the vulnerable system. Subsequent system confidentiality impact (SC:H) High confidentiality impact on subsequent systems. Subsequent system integrity impact (SI:N) No integrity impact on subsequent systems. Subsequent system availability impact (SA:N) No availability impact on subsequent systems.

Identifiers

Type	Value
GHSA	GHSA-h2vw-ph2c-jvwf ↗
CVE	CVE-2026-44992 ↗

CWEs

CWE id	Name
CWE-15	External Control of System or Configuration Setting
CWE-522	Insufficiently Protected Credentials

Credits

nexrin (reporter)

Affected packages (1)

Vulnerable version ranges and first patched releases as published by GitHub.

Ecosystem	Package	Vulnerable range	First patched	Vulnerable functions
npm	openclaw	>= 2026.4.5, < 2026.4.20	2026.4.20	—

OpenClaw: Workspace dotenv MiniMax host override could redirect credentialed requests