CVE-2026-42435

Description

OpenClaw: Shell-wrapper detection missed env-argv assignment injection forms

Predictions

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

References

• https://github.com/openclaw/openclaw/commit/8f8492d172f4c5b4fd7dd9a47855ed620c8770ab
• https://github.com/openclaw/openclaw/security/advisories/GHSA-j6c7-3h5x-99g9
• https://www.vulncheck.com/advisories/openclaw-shell-wrapper-detection-bypass-via-environment-variable-assignment-injection
• https://github.com/openclaw/openclaw/pull/65717
• https://github.com/openclaw/openclaw
• https://github.com/advisories/GHSA-j6c7-3h5x-99g9

CWEs

CWE-184