GitHub Advisoryadvisory · npm

GHSA-77hf-7fqf-f227 OpenClaw skills-install-download: tar.bz2 extraction bypassed archive safety parity checks (local DoS)

MEDIUM Published 2026-03-03 Modified 2026-03-03 Official page ↗
Ecosystem
npm
Packages
openclaw
Severity
Moderate
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weaknesses
CWE-400, CWE-409
Reviewed
2026-03-03

Affected packages

• npm openclaw: < 2026.3.2 → fixed in 2026.3.2

Description

Summary The `tar.bz2` installer path in `src/agents/skills-install-download.ts` used shell tar preflight/extract logic that did not share the same hardening guarantees as the centralized archive extractor. This allowed crafted `.tar.bz2` archives to bypass special-entry blocking and extracted-size guardrails enforced on other archive paths, causing local availability impact during skill install. Affected Packages / Versions • Package: `openclaw` (npm) • Latest published at triage time: `2026.3.1` • Affected range: `<= 2026.3.1` • Patched in: `2026.3.2` (released) Impact Local DoS / availability impact when processing untrusted `.tar.bz2` skill archives. Fix Commit(s) • `0dbb92dd2bcf9a32379d11c0f11ed016669dae3e` Related advisories • Canonical overlap (closed): GHSA-3pj7-x8jr-jvj8 • Duplicate variant (closed): GHSA-rgr7-g85h-6v82

Related

Weakness · CWE (2)

  • CWE-400 Uncontrolled Resource Consumption weakness
  • CWE-409 Improper Handling of Highly Compressed Data (Data Amplification) weakness

References