CVE-2026-27008mediumCWE-73

CVE-2026-27008: fallo de gravedad media en openclaw

OpenClaw hardened the skill download target directory validation

Publicada el 19 feb 2026 · Actualizada el 20 feb 2026

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 6.8epss 0.2%

probabilidad de explotación

0.2%top 92% de las CVE

explotación observada

noninguna fuente lo reporta

OpenClaw is a personal AI assistant. Prior to version 2026.2.15, a bug in `download` skill installation allowed `targetDir` values from skill frontmatter to resolve outside the per-skill tools directory if not strictly validated. In the admin-only `skills.install` flow, this could write files outside the intended install sandbox. Version 2026.2.15 contains a fix for the issue.

CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N

Productos afectados

openclaw · openclaw

CVEs relacionadas — openclaw

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-26323HIGHOpenClaw has a command injection in maintainer clawtributors updaterEPSS 2.1%CVE-2026-27487HIGHOpenClaw: Prevent shell injection in macOS keychain credential writeEPSS 1.9%CVE-2026-32063MEDIUMOpenClaw 2026.2.19-2 < 2026.2.21 - Command Injection via Newline in systemd Unit GenerationEPSS 1.3%CVE-2026-25157HIGHOpenClaw/Clawdbot has OS Command Injection via Project Root Path in sshNodeCommandEPSS 1.1%CVE-2026-32060HIGHOpenClaw < 2026.2.14 - Path Traversal in apply_patch via Crafted PathsEPSS 1.0%CVE-2026-25593HIGHOpenClaw Affected by Unauthenticated Local RCE via WebSocket config.applyEPSS 1.0%

Referencias

https://github.com/openclaw/openclaw/commit/2363e1b0853a028e47f90dcc1066e3e9809d65f1 https://github.com/openclaw/openclaw/commit/b6305e97256d67e439719faacf5af3de9727d6e1 https://github.com/openclaw/openclaw/releases/tag/v2026.2.15 https://github.com/openclaw/openclaw/security/advisories/GHSA-h7f7-89mm-pqh6