CVE-2026-45003CWE-441

OpenClaw < 2026.4.22 - Connector Endpoint Host Override via Workspace dotenv Files

Medium · published May 11, 2026

CVSS v4.0
4.1
EPSS
0%
Percentile
3.7
In the wild
Unconfirmed
What it is

OpenClaw before 2026.4.22 allows workspace dotenv files to override connector endpoint hosts for Matrix, Mattermost, IRC, and Synology connectors. Attackers with workspace access can redirect runtime traffic to malicious endpoints by setting endpoint variables in dotenv files.

The record
Technical detail
CVSS v4.0
4.1 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00148 · 3.7th percentile
Weakness
CWE-441 · Unintended Proxy or Intermediary ('Confused Deputy')
Published
2026-05-11T16:46Z
EPSS history
Timeline
  • 11 MAY 16:46Z
    OpenClaw < 2026.4.22 - Connector Endpoint Host Override via Workspace dotenv Files
    cvelistv5