CVE-2026-44992 OpenClaw 2026.4.5 through 2026.4.19 - MiniMax API Host Override via Workspace dotenv

Medium 4.1 Published 11 May 2026 Updated 25 May 2026

Attackers can redirect API requests to malicious servers via environment variable injection, exposing API keys and data.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: A user has to click or open something
Fix: Available

What is CVE-2026-44992?

CVE-2026-44992 is a medium-severity server-side request forgery vulnerability in Openclaw Openclaw, published on 11 May 2026. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.

Official description

OpenClaw versions 2026.4.5 before 2026.4.20 contain an environment variable injection vulnerability allowing workspace dotenv to override MINIMAX_API_HOST. Attackers can redirect credentialed MiniMax API requests to attacker-controlled origins, exposing the MiniMax API key in Authorization headers.

Weakness: CWE-441

Which versions are affected by CVE-2026-44992?

2 open source packages ship an affected version, including openclaw. It affects 1 product.

Package	Affected	Fixed in
`openclaw` npm	From `2026.4.5`	`2026.4.20`
`openclaw` npm	From `2026.4.5`	`2026.4.20`

Products include Openclaw Openclaw.

How do I fix CVE-2026-44992?

Upgrade openclaw to 2026.4.20 or later.

Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.

Is CVE-2026-44992 being exploited?

There is no known exploitation of CVE-2026-44992 in the wild and no public exploit code.

All Openclaw Openclaw vulnerabilities

Sources

Also known as GHSA-h2vw-ph2c-jvwf, MINI-77rp-6hpm-v6c5, MINI-p9x3-mhg2-rcr8.