Openclaw cli: OpenClaw has a Path Traversal in Plugin Installation (CVE-2026-28447)

OpenClaw CLI's plugin installer derives the on-disk install directory from the plugin manifest's name without sufficient validation. This allows a malicious plugin with a crafted name (e.g., '@malicious/..') to escape the intended extensions directory and write files to a parent directory, such as the OpenClaw state directory (~/.openclaw/). On Windows, failure to sanitize backslashes enables further directory traversal. The vulnerability requires user interaction to install untrusted plugins. The issue is resolved in version 2026.2.1 by validating plugin IDs and ensuring the install directory remains within the configured extensions base directory.

If an operator installs a malicious plugin, files can be written outside the intended extensions directory, potentially overwriting critical files in the OpenClaw state directory. On Windows, the traversal can extend deeper due to improper sanitization. This could lead to integrity issues and denial of service under the privileges of the user running OpenClaw. However, since plugin installation is typically an operator-only action and may be performed on a separate machine, exposure is reduced in many deployments.

A fix is available in OpenClaw CLI version 2026.2.1 and later. Users should upgrade to at least version 2026.2.1 to ensure plugin installation directories are properly validated and constrained. Avoid installing untrusted plugins prior to applying this update.