OpenClaw: MCP stdio server env could load dangerous startup variables from workspace config
Moderate severity
GitHub Reviewed
Published
Apr 21, 2026
in
openclaw/openclaw
•
Updated May 19, 2026
Give feedback on Dependabot alerts