GitHub Advisoryadvisory · npm

GHSA-h7f7-89mm-pqh6 OpenClaw hardened the skill download target directory validation

MEDIUM Published 2026-02-18 Modified 2026-02-20 Official page ↗
Aliases
CVE-2026-27008
Ecosystem
npm
Packages
openclaw
Severity
Moderate
CVSS vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N
Weaknesses
CWE-73
Reviewed
2026-02-18

Affected packages

• npm openclaw: < 2026.2.15 → fixed in 2026.2.15

Description

Affected Packages / Versions • Package: `openclaw` (npm) • Affected versions: `<= 2026.2.14` • Fixed in: planned release `2026.2.15` Impact A bug in `download` skill installation allowed `targetDir` values from skill frontmatter to resolve outside the per-skill tools directory if not strictly validated. In the admin-only `skills.install` flow, this could write files outside the intended install sandbox. Fix Commit(s) • 2363e1b08 fix(security): restrict skill download target paths • b6305e972 test(skills): split installer security coverage Acknowledgement Thanks @Adam55A-code for reporting.

Related

Alias · CVE (1)

Weakness · CWE (1)

  • CWE-73 External Control of File Name or Path weakness

References