Openclaw cli: OpenClaw's skills-install-download can be redirected outside the tools root by rebinding the validated base path (CVE-2026-33574)

The OpenClaw CLI's skills download installer validates the intended per-skill tools root path lexically but later reuses this mutable path during archive download and copying. If a local attacker can rebind the tools-root path between the validation step and the final write operation, the installer can be tricked into writing files outside the intended tools directory. The fix implemented in version 2026.3.8 pins the canonical tools root path immediately after validation and derives subsequent paths from this immutable reference, preventing path rebinding attacks.

A local attacker can exploit this vulnerability to redirect file writes outside the intended tools directory, potentially overwriting or placing files in unauthorized locations on the filesystem. This could lead to unauthorized file modification or privilege escalation depending on the environment and usage context.

Upgrade to OpenClaw CLI version 2026.3.8 or later, which includes a fix that pins the canonical tools root path after validation to prevent path rebinding. No other mitigation is required as the vulnerability is addressed by this official fix.