CVE-2026-108156: External Control of File Name or Path in netease-youdao LobsterAI

LobsterAI versions 2026.5.27 through 2026.9.23 contain an external control of file path vulnerability in the skills:delete IPC handler. This handler trusts the openclawSourceDir value specified in a skill's _meta.json file during uninstallation. Because the security scanner does not inspect the _meta.json file, an attacker can craft a malicious skill that, when installed and later uninstalled, causes recursive deletion of arbitrary user-writable directories such as the user's home directory. This vulnerability has a CVSS 4.0 base score of 6.9, reflecting a medium severity. The vulnerability is present in a cloud-hosted service, and a patch is available from the vendor.

An attacker who convinces a user to install a malicious skill can cause the uninstallation process to recursively delete arbitrary user-writable directories, including critical directories like the home directory. This can lead to loss of user data and potential disruption of user environments. The vulnerability requires user interaction (installation of a crafted skill) and local access to trigger the deletion. There are no known exploits in the wild at this time.

A patch is available for this vulnerability. Since LobsterAI is a cloud-hosted service, the vendor manages remediation server-side. Users and administrators should ensure their service is updated to the patched version or confirm with the vendor that the patch has been applied. No additional user action is required beyond applying the official fix.