Security Advisory

CVE-2026-44992

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-05-11 16:46:32

Last updated 2026-05-25 23:42:21

Assigner VulnCheck

CVSS score 4.1

State PUBLISHED

Description

OpenClaw versions 2026.4.5 before 2026.4.20 contain an environment variable injection vulnerability allowing workspace dotenv to override MINIMAX_API_HOST. Attackers can redirect credentialed MiniMax API requests to attacker-controlled origins, exposing the MiniMax API key in Authorization headers.

← Browse all CVEs View on cve.org ↗