OpenClaw Environment Variable Disclosure Vulnerability via jq $ENV Filter Bypass

A vulnerability allowing environment variable disclosure exists in OpenClaw versions prior to 2026.3.28. The issue arises in the jq safe-bin policy, which improperly allows access to environment data through the $ENV filter. This oversight enables attackers to bypass safe-bin restrictions and access sensitive environment variables that should be protected.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive environment variables, bypassing the intended restrictions of the jq safe-bin policy.

Remediation

Users can upgrade to OpenClaw version 2026.3.28 or later to address this vulnerability.