OpenClaw before 2026.5.28 contains a credential exposure vulnerability where workspace dotenv files can override provider credentials. Attackers with lower-trust access to configured input paths can expose sensitive data and credentials that should remain within trusted boundaries.
2026年9月4日
CVE-2026-59261 [HIGH] – OpenClaw before 2026.5.28 contains a credential exposure vulnerability where workspace dot
📑 文章目录



