Executive brief
8421bit MiniClaw is an AI-powered micro-kernel and MCP server designed to enhance AI assistants like Claude Desktop and Cursor with memory and automation capabilities. A security flaw in the way it handles script execution allows an attacker to access files outside of the intended directory. This could lead to the exposure of sensitive system files or configuration data, potentially compromising the privacy and security of the user's AI environment.
Technical details
A path traversal vulnerability (CWE-22) exists in 8421bit MiniClaw up to commit 43905b9. The vulnerability is located in the `isPathInside` function within `src/kernel.ts`, which is utilized by the `executeSkillScript` component. By manipulating file paths provided to the skill execution engine, a remote attacker with low privileges can bypass directory restrictions to read arbitrary files on the host system. The issue was addressed in commit e8bd4e1 by implementing proper path boundary checks, switching to `execFile` for safer execution, and adding regression tests.
Affected products
- 8421bit MiniClaw up to 43905b934cf76489ab28e4d17da28ee97970f91f
Timeline
- 2026-04-30: patched: Fix committed in e8bd4e17e9428260f2161378356affc5ce90d6ed
- 2026-05-07: disclosed: CVE-2026-8113 published