Openclaw cli: OpenClaw: Reject symlinks in local skill packaging script (CVE-2026-27485)
Description
The OpenClaw CLI's local skill packaging script previously followed symlinks when creating .skill archives, potentially including unintended local files outside the skill directory. This vulnerability is limited to local execution by skill authors packaging skills and does not affect remote or runtime components. The issue is fixed by rejecting symlinks during packaging in version 2026.2.18.
CVSS v4.0
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability in OpenClaw CLI's skill packaging script (skills/skill-creator/scripts/package_skill.py) allowed symlinks within a skill directory to be followed during archive creation, which could cause files outside the intended skill root to be included in the packaged .skill archive. This occurs only during local manual packaging by skill authors and cannot be triggered remotely or during normal runtime. The flaw was addressed by rejecting symlinks during packaging and adding regression tests. The fix is included in version 2026.2.18.
Potential Impact
This vulnerability could lead to unintentional disclosure of local files from the packaging machine into the generated skill archive if an attacker controls the skill directory contents. However, exploitation requires local execution of the packaging script by a skill author on crafted skill contents. There is no remote attack vector or runtime impact.
Mitigation Recommendations
A fix is available in OpenClaw CLI version 2026.2.18 that rejects symlinks during skill packaging. Users should upgrade to this version once published. The vendor has added regression tests and updated packaging guidance to document the symlink restriction.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- BREW-openclaw-cli-CVE-2026-27485
- Osv Schema Version
- 1.7.3
- Ecosystems
- ["Homebrew"]
- Cvss Version
- 4.0
Threat ID: 6ac245cc12601ec6a3167f37
Added to database: 10/04/2026, 12:25:48 UTC
Last enriched: 10/04/2026, 13:12:36 UTC
Last updated: 10/04/2026, 16:08:37 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.