# CVE-2026-108156: LobsterAI external control of file path in skills uninstall

Source: https://junglewise.ai/threats/cve-2026-108156-lobsterai-2026-5-27-through-2026-9-23-contains-an-external  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-09. Updated: 2026-10-16  
License: CC BY 4.0 with a link back

CVE-2026-108156 · Severity: high · CVSS 7.1 · Published 2026-10-09

LobsterAI is an open-source desktop AI agent that runs automation tasks on your computer. A vulnerability in the skill uninstall process allows attackers to delete arbitrary user files and folders if you install a malicious skill. When you try to uninstall the crafted skill, it can recursively wipe your home directory or other critical user data.

Technologies: [Netease Youdao LobsterAI](https://junglewise.ai/threats/technologies/lobsterai). Vendors: [Netease Youdao](https://junglewise.ai/threats/vendors/netease-youdao).

## Quick answers

**Is CVE-2026-108156 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-108156 being exploited in the wild.

**How severe is CVE-2026-108156?** High severity, with a CVSS score of 7.1, published 9 October 2026.

**Which products and versions are affected?** Netease Youdao LobsterAI 2026.5.27 through 2026.9.23.

**Is there a fix for CVE-2026-108156?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-108156 attacked?** It is attacked with local access, in a software library.

**Am I affected by CVE-2026-108156?** Check whether you run Netease Youdao LobsterAI at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability exists in the skills:delete IPC handler, which trusts an unsanitized openclawSourceDir value from a skill's _meta.json manifest during uninstall. An attacker can craft a malicious skill with a _meta.json file pointing to arbitrary user-writable directories; the uninstall handler will recursively delete those paths without validation. The security scanner does not inspect _meta.json, allowing the malicious metadata to bypass detection.

## Affected products

- Netease Youdao LobsterAI 2026.5.27 through 2026.9.23

## Timeline

- 2026-10-09: disclosed

## References

- [https://github.com/netease-youdao/LobsterAI](https://github.com/netease-youdao/LobsterAI)
- [https://github.com/netease-youdao/LobsterAI/blob/791a352dee3b3d8c6f64edcaf229ce474a68f6c5/src/main/ipcHandlers/skills/handlers.ts](https://github.com/netease-youdao/LobsterAI/blob/791a352dee3b3d8c6f64edcaf229ce474a68f6c5/src/main/ipcHandlers/skills/handlers.ts)

## Related threats

- [LobsterAI hardcoded password vulnerability in API key encryption](https://junglewise.ai/threats/cve-2026-112014-lobsterai-before-2026-10-16-contains-a-hardcoded-password)
- [Netease Youdao LobsterAI server-side request forgery in browser configuration](https://junglewise.ai/threats/cve-2026-90818-netease-youdao-lobsterai-server-side-request-forgery-in-browser)