OpenClaw before 2026.3.31 allows workspace .env files to override the OPENCLAW_BUNDLED_HOOKS_DIR environment variable, enabling loading of attacker-controlled h…

OpenClaw before version 2026.3.31 contains a vulnerability that allows workspace .env files to override the OPENCLAW_BUNDLED_HOOKS_DIR environment variable. This enables attackers to load malicious hook code by replacing trusted default bundled hooks from untrusted workspaces. The vulnerability can lead to arbitrary code execution when attackers manipulate the environment variable to point to attacker-controlled hook files. This represents a significant security risk as it allows code execution through workspace configuration manipulation.