OpenClaw Environment Variable Bypass Vulnerability in Package Index URL Handling

A vulnerability exists in OpenClaw versions prior to 2026.3.31, where the application fails to properly sanitize the PIP_INDEX_URL and UV_INDEX_URL environment variables in host execution contexts. This oversight allows attackers to redirect Python package-index traffic by injecting malicious URLs through these unsanitized environment variables. Exploitation of this vulnerability could intercept or manipulate package management operations.

Impact

Exploitation of this vulnerability could lead to unauthorized redirection of Python package-index traffic, allowing interception or manipulation of package management operations.

Reproduction

The vulnerability can be reproduced by setting the PIP_INDEX_URL or UV_INDEX_URL environment variables with malicious index URLs. When OpenClaw executes a package management operation, it will use the injected URLs, bypassing the application's sanitation process. This can be verified by checking the application's package management logs or behavior, which may show the interception or manipulation of expected operations.

Remediation

Users can upgrade to OpenClaw version 2026.3.31 or later, where this vulnerability has been patched.