Security Advisory

CVE-2026-59261

7.1
HIGH

Vulnerability Description

OpenClaw before 2026.5.28 contains a credential exposure vulnerability where workspace dotenv files can override provider credentials. Attackers with lower-trust access to configured input paths can expose sensitive data and credentials that should remain within trusted boundaries.
Published Date July 8, 2026
Official Source NIST NVD Advisory