Executive brief
OpenClaw is a plugin and asset management tool that allows users to install skills, hooks, plugins, and other components from archive files. A path traversal vulnerability (known as Zip Slip) in the archive extraction process allows a malicious archive to write files outside the intended directory, potentially enabling an attacker to execute code or establish persistence if they can trick a user into installing a crafted archive.
Technical details
This is a path traversal vulnerability (CWE-22) in OpenClaw's archive extraction logic during installation commands. The vulnerability occurs when processing untrusted archives (from local files or download URLs) through commands like `openclaw skills install`, `openclaw hooks install`, `openclaw plugins install`, and `openclaw signal install`. The flaw allows specially crafted archives to include path traversal sequences (Zip Slip) that cause files to be extracted outside the intended directory. An attacker can achieve arbitrary file write as the current user, potentially leading to code execution or persistence. The vulnerability has been patched in version 2026.2.14 and does not affect normal gateway operation or message receipt.
Affected products
- OpenClaw openclaw >=2026.1.16-2, <2026.2.14
Timeline
- 2026-03-02: disclosed
- 2026-02-14: patched: Fixed in version 2026.2.14