https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 18:37:47 +0000 https://vulnerability.circl.lu/vuln/cve-2026-33574 <p><strong>Affected:</strong> OpenClaw</p> <p>OpenClaw before 2026.3.8 contains a path traversal vulnerability in the skills download installer that validates the tools root lexically but reuses the mutable path during archive download and copy operations. A local attacker can rebind the tools-root path between validation and final write to redirect the installer outside the intended tools directory.</p> <p><strong>Affected:</strong> OpenClaw</p> <p>OpenClaw before 2026.3.8 contains a path traversal vulnerability in the skills download installer that validates the tools root lexically but reuses the mutable path during archive download and copy operations. A local attacker can rebind the tools-root path between validation and final write to redirect the installer outside the intended tools directory.</p> https://vulnerability.circl.lu/vuln/cve-2026-33574 https://vulnerability.circl.lu/vuln/ghsa-vhwf-4x96-vqx2 <p><strong>Affected:</strong> npm: openclaw</p> <p>OpenClaw&#39;s skills download installer validated the intended per-skill tools root lexically, but later reused that mutable path while downloading and copying the archive into place. If a local attacker could rebind that tools-root path between validation and the final write, the installer could be redirected to write outside the intended tools directory.</p> <p>The fix pins the canonical per-skill tools root immediately after validation and derives later download/copy paths from that canonical root, so rebinding the lexical path fails closed instead of redirecting the write.</p> <p>## Affected Packages / Versions</p> <p>- Package: `openclaw` (npm) - Latest published vulnerable version: `2026.3.7` - Affected range: `&lt;= 2026.3.7` - Fixed in released version: `2026.3.8`</p> <p>## Fix Commit(s)</p> <p>- `9abf014f3502009faf9c73df5ca2cff719e54639`</p> <p>## Release Verification</p> <p>- Verified fixed in GitHub release `v2026.3.8` published on March 9, 2026. - Verified `npm view openclaw version` resolves to `2026.3.8`. - Verified the release contains the regression test covering tools-root rebinding and that the test passes against the `v2026.3.8` tree.</p> <p>Thanks @tdjackey for reporting.</p> <p><strong>Affected:</strong> npm: openclaw</p> <p>OpenClaw&#39;s skills download installer validated the intended per-skill tools root lexically, but later reused that mutable path while downloading and copying the archive into place. If a local attacker could rebind that tools-root path between validation and the final write, the installer could be redirected to write outside the intended tools directory.</p> <p>The fix pins the canonical per-skill tools root immediately after validation and derives later download/copy paths from that canonical root, so rebinding the lexical path fails closed instead of redirecting the write.</p> <p>## Affected Packages / Versions</p> <p>- Package: `openclaw` (npm) - Latest published vulnerable version: `2026.3.7` - Affected range: `&lt;= 2026.3.7` - Fixed in released version: `2026.3.8`</p> <p>## Fix Commit(s)</p> <p>- `9abf014f3502009faf9c73df5ca2cff719e54639`</p> <p>## Release Verification</p> <p>- Verified fixed in GitHub release `v2026.3.8` published on March 9, 2026. - Verified `npm view openclaw version` resolves to `2026.3.8`. - Verified the release contains the regression test covering tools-root rebinding and that the test passes against the `v2026.3.8` tree.</p> <p>Thanks @tdjackey for reporting.</p> https://vulnerability.circl.lu/vuln/ghsa-vhwf-4x96-vqx2