CVE-2026-29610 | OpenClaw up to 2026.2.13 Environment Variable uncontrolled search path (GHSA-jqpq-mgvm-f9r6)

A vulnerability was found in OpenClaw up to 2026.2.13. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Environment Variable Handler. This manipulation causes uncontrolled search path.

This vulnerability is registered as CVE-2026-29610. The attack needs to be launched locally. No exploit is available.

Upgrading the affected component is advised.