CVE-2026-59261 — OpenClaw < 2026.5.28 - Credential Override via Workspace Dotenv Files
OpenClaw before 2026.5.28 contains a credential exposure vulnerability where workspace dotenv files can override provider credentials. Attackers with lower-trust access to confi…
Published: 2026-07-08 · CVSS: 8.4 · CVSS 4.0
OpenClaw before 2026.5.28 contains a credential exposure vulnerability where workspace dotenv files can override provider credentials. Attackers with lower-trust access to configured input paths can expose sensitive data and credentials that should remain within trusted boundaries.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7