The vulnerability in openclaw crabbox before version 0.9.0 involves improper limitation of pathname resolution within the Islo provider's workspace. Attackers can use crafted configuration files containing path traversal sequences to escape the designated /workspace directory. When sync.delete is enabled, this can lead to arbitrary file deletion or overwriting due to unvalidated execution of rm -rf and mkdir -p commands on attacker-controlled paths. The CVSS 4.0 vector indicates local attack vector with low attack complexity, no privileges required, but user interaction is needed, and the impact on integrity and availability is high. There is no vendor advisory or patch information available at this time.

Successful exploitation allows an attacker to delete or overwrite arbitrary files on the system where crabbox is running, potentially causing data loss or service disruption. The attack requires local access and user interaction but does not require privileges. The vulnerability impacts the integrity and availability of the affected system. There are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, avoid enabling the sync.delete feature or restrict usage to trusted configuration files to reduce risk. Monitor for updates from the openclaw project regarding patches or mitigations.