PT-2026-56484

CVE-2026-59261

Published

2026-07-08

Updated

2026-07-09

Description by

CVSS 4.0

8.4

High

MetricsAV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.5.28

Description A credential exposure issue exists where workspace dotenv files can override provider credentials. This allows attackers with lower-trust access to configured input paths to expose sensitive data and credentials that are intended to remain within trusted boundaries.

Recommendations Update to version 2026.5.28.

Exploitability

Exploit

Fix

Impacts

Researchers

Harish Kolla

Vendors

Affected products

Weakness enumeration

CWE-184: Incomplete List of Disallowed Inputs

CWE-522: Insufficiently Protected Credentials