CVE-2026-27008 MEDIUM

CVE-2026-27008: OpenClaw hardened the skill download target directory validation

Vendor Openclaw
Product openclaw
Weakness CWE-73
Published February 19, 2026
Last update February 20, 2026
View on NVD All CVEs

CVSS base score

6.8/10
Attack vector Local
Attack complexity Low
Privileges required High
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

OpenClaw is a personal AI assistant. Prior to version 2026.2.15, a bug in `download` skill installation allowed `targetDir` values from skill frontmatter to resolve outside the per-skill tools directory if not strictly validated. In the admin-only `skills.install` flow, this could write files outside the intended install sandbox. Version 2026.2.15 contains a fix for the issue.

Key dates

02Disclosure timeline

February 19, 2026 CVE published
February 20, 2026 Record updated