Vulnerability · Published Feb 19, 2026 · Assigned by GitHub_M

CVE-2026-27008OpenClaw hardened the skill download target directory validation

Medium 6.8

In plain English

A medium-severity security flaw in openclaw from openclaw. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 8% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 4.0)6.8Medium

Exploit odds (30 days)0.2%top 91.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

OpenClaw is a personal AI assistant. Prior to version 2026.2.15, a bug in `download` skill installation allowed `targetDir` values from skill frontmatter to resolve outside the per-skill tools directory if not strictly validated. In the admin-only `skills.install` flow, this could write files outside the intended install sandbox. Version 2026.2.15 contains a fix for the issue.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
npm	openclaw	2026.2.15	GHSA-h7f7-89mm-pqh6

Affected products (as reported)

Vendor	Product	Versions
openclaw	openclaw	< 2026.2.15

Weakness: CWE-73 · Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N

References

https://github.com/openclaw/openclaw/security/advisories/GHSA-h7f7-89mm-pqh6 x_refsource_CONFIRM
https://github.com/openclaw/openclaw/commit/2363e1b0853a028e47f90dcc1066e3e9809d65f1 x_refsource_MISC
https://github.com/openclaw/openclaw/commit/b6305e97256d67e439719faacf5af3de9727d6e1 x_refsource_MISC
https://github.com/openclaw/openclaw/releases/tag/v2026.2.15 x_refsource_MISC