Openclaw cli: OpenClaw hardened the skill download target directory validation (CVE-2026-27008)

The openclaw-cli package (npm) has a vulnerability identified as CVE-2026-27008 affecting versions from 2026.1.29 up to but not including 2026.2.15. The issue arises from a bug in the 'download' skill installation process where the 'targetDir' value from skill frontmatter is not strictly validated, allowing path resolution outside the designated per-skill tools directory. This vulnerability exists in the admin-only 'skills.install' flow and could permit writing files outside the intended installation sandbox. The vendor has acknowledged the issue and plans a fix in version 2026.2.15, with security commits restricting skill download target paths and improving installer security coverage.

This vulnerability allows an attacker with administrative privileges to write files outside the intended skill installation sandbox, potentially leading to unauthorized file modifications or additions on the system where openclaw-cli is used. Since the exploit requires admin-level privileges and no known exploits are reported in the wild, the impact is limited to privileged users misusing the installation process.

A patch is available and planned for release in version 2026.2.15. Users should upgrade to this version once it is released to remediate the vulnerability. Until then, restrict administrative access to trusted users only to minimize risk.