The vulnerability in openclaw crabbox before version 0.9.0 involves improper limitation of pathname resolution in the Islo provider's workspace path. Attackers can craft configuration files containing path traversal sequences that cause the system to resolve paths outside the designated /workspace directory. When sync.delete is enabled, the workspace preparation logic executes destructive commands (rm -rf) on these resolved paths without validating that they remain within the intended directory boundary. This can lead to arbitrary file deletion or overwriting outside the workspace, posing a risk to system integrity and data. The vulnerability is rated medium severity with a CVSS 4.0 score of 6.8. There is no vendor advisory or patch information available at this time.

Successful exploitation allows an attacker to delete or overwrite arbitrary files outside the intended workspace directory on the affected system. This can result in loss of data or disruption of system operations. The impact is significant due to the ability to execute destructive file operations without proper path validation. However, exploitation requires the attacker to supply malicious configuration files and enable the sync.delete feature, and user interaction is needed (UI:A). No known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should avoid enabling the sync.delete feature or restrict the use of untrusted .crabbox.yaml or crabbox.yaml files to prevent exploitation. Monitoring for updates from the openclaw project is recommended to apply any forthcoming patches or official mitigations.