Description
OpenClaw before 2026.3.8 contains a path traversal vulnerability in the skills download installer that validates the tools root lexically but reuses the mutable path during archive download and copy operations. A local attacker can rebind the tools-root path between validation and final write to redirect the installer outside the intended tools directory.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OpenClaw | OpenClaw | < 2026.3.8 | 2026.3.8 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | openclaw | < 2026.3.8 | 2026.3.8 | GHSA-vhwf-4x96-vqx2 |
Advisories 1
- WID-SEC-2026-0691 OpenClaw: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 31, 2026
References
- GitHub Security Advisory (GHSA-vhwf-4x96-vqx2) vendor-advisory
- Patch Commit patch
- VulnCheck Advisory: OpenClaw < 2026.3.8 - Path Traversal via Tools Root Rebinding in Skills Download third-party-advisory