CVE-2026-45224 describes a path traversal vulnerability in openclaw's crabbox product prior to version 0.9.0. The Islo provider's workspace path resolution does not properly restrict pathname inputs, allowing attackers to specify paths outside the designated /workspace directory. When sync.delete is enabled, this can lead to arbitrary file deletion and overwriting because the software runs rm -rf and mkdir -p commands on these attacker-controlled paths without validating that they remain within the intended directory. This vulnerability has a CVSS 4.0 base score of 6.8 (medium severity) and does not currently have an official remediation or patch available.

Successful exploitation allows an attacker to delete or overwrite arbitrary files on the system where crabbox is running, potentially leading to data loss or system disruption. The vulnerability requires user interaction and local access (attack vector is local), but does not require privileges. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should avoid enabling sync.delete or restrict usage to trusted configurations. Careful validation of workspace path inputs and limiting user ability to supply .crabbox.yaml files with traversal sequences can reduce risk.