Threat Investigation
Request a demo

CVE-2026-27008

Medium

Description

OpenClaw is a personal AI assistant. Prior to version 2026.2.15, a bug in `download` skill installation allowed `targetDir` values from skill frontmatter to resolve outside the per-skill tools directory if not strictly validated. In the admin-only `skills.install` flow, this could write files outside the intended install sandbox. Version 2026.2.15 contains a fix for the issue.

SeverityMedium
CVSS6.7
Exploit probability—
ProductOpenclaw
PublishedFeb 20, 2026
First seenFeb 20, 2026
Weakness typeCWE-73CWE-73

How to fix

Update
  • openclaw openclaw2026.2.15 or later
  • openclaw2026.2.15 or later

Affected products

ProductAffected versionsFixed in
openclaw openclawv < 2026.2.152026.2.15
openclawnpmv < 2026.2.152026.2.15

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.