← Back to Clusters

Environment Variable Security Enhancements

This cluster focuses on improving security by blocking dangerous environment variables and validating configurations across various components.

40 PRs
fix security config Representative: #8139
# Title Author Created GitHub
6841 Enhance ensureDir function with catch block comment VenkataPagadalaGIT 2026-02-02 View
8078 fix(config): add prototype pollution protection to deepMerge yubrew 2026-02-03 View
8139 fix(config): block dangerous environment variables from config.env rep yubrew 2026-02-03 View
8150 fix(skills): block dangerous environment variables from skill config yubrew 2026-02-03 View
8161 fix(sandbox): block dangerous environment variables from Docker containers yubrew 2026-02-03 View
8186 fix(sandbox): validate setupCommand to prevent shell injection yubrew 2026-02-03 View
9200 Fix: Strip dangerous env vars from baseEnv in host execution vishaltandale00 2026-02-05 View
9215 Fix: Inject skill env vars into subagent exec commands vishaltandale00 2026-02-05 View
9433 fix: pass raw command string to node exec instead of argv array dbottme 2026-02-05 View
10174 fix(docker): exclude .env files from Docker build context coygeek 2026-02-06 View
10258 fix(config): preserve ${ENV_VAR} references when writing config (#9813) nu-gui 2026-02-06 View
10729 fix: replace existsSync+readFileSync with try-catch in env-file Yida-Dev 2026-02-06 View
11185 fix #11150 - [Bug]: Exec tool schema host default ignores tools.exec.host config Lucky-Lodhi2004 2026-02-07 View
11497 feat(exec): inject agent identity env vars for subagents NOVA-Openclaw 2026-02-07 View
11873 fix: eliminate TOCTOU race in readExecApprovalsSnapshot Yida-Dev 2026-02-08 View
11878 fix: add missing error handler to execDocker child process Yida-Dev 2026-02-08 View
13246 feat: inject agent/session context as environment variables in exec commands LePetitPince 2026-02-10 View
14308 fix(sandbox): pass docker.env config to container creation wboudy 2026-02-11 View
15615 fix(security): restrict PATH override to exact match in node-host sanitizeEnv AI-Reviewer-QS 2026-02-13 View
15983 feat(exec): support env field in tools.exec config Imccccc 2026-02-14 View
19449 fix: preserve .env during package/plugin updates Sid-V5 2026-02-17 View
19507 security: block prototype pollution in template path resolver Mozzzaic 2026-02-17 View
19538 security: migrate sensitive Docker env vars to Docker secrets Mozzzaic 2026-02-17 View
19566 [AI-Assisted] feat: add openclaw sandbox run command bundasht 2026-02-17 View
19904 Add remote-ssh/remote-k8s-pod/remote-docker for exec QIngyuanfl 2026-02-18 View
20592 feat: Unified Natural Language Expanso Pipeline Builder & Validator aronchick 2026-02-19 View
21164 feat(config): add lenient mode to resolveConfigEnvVars — preserve gateway-onl... Mellowambience 2026-02-19 View
21173 fix(config): support envFiles option in resolveConfigEnvVars for gateway-only... Mellowambience 2026-02-19 View
21280 fix(exec): reflect configured exec host in tool schema default (#11150) Asm3r96 2026-02-19 View
21509 fix: show requestedHost instead of configuredHost in exec host error hint sleitor 2026-02-20 View