OpenClaw (npm package 'openclaw') versions >= 2026.5.28 and < 2026.8.1 mishandle archive listings in the tar.bz2 skill installer: bounded… (CVE-2026-100542)
OpenClaw npm package versions from 2026.5.28 up to but not including 2026.8.1 contain a vulnerability in the tar.bz2 skill installer. The vulnerability involves mishandling archive listings where bounded command-output suffixes were incorrectly treated as complete archive listings. This allows a crafted skill archive to bypass entry count and size checks, resulting in extraction of over-limit files or entries that consume disk space or inodes. The flaw does not enable execution of archive contents by itself. The issue is fixed in version 2026.8.1.
AI Analysis
Technical Summary
OpenClaw versions >=2026.5.28 and <2026.8.1 improperly handle archive listings in the tar.bz2 skill installer by treating bounded command-output suffixes as complete listings. This flaw allows a maliciously crafted .tar.bz2 or .tbz2 skill archive to push prohibited entries out of retained listings, bypassing entry count and size checks. Consequently, the archive is extracted fully, potentially persisting over-limit files or entries in the skill tools directory, which can consume excessive disk space or inodes. The vulnerability does not enable direct execution of archive contents. The issue is resolved in version 2026.8.1.
Potential Impact
An attacker who convinces an operator to approve installation of a malicious or compromised skill archive can cause the skill tools directory to contain more files or entries than intended, consuming disk space or inodes beyond configured limits. This may lead to resource exhaustion on the system. There is no direct impact on confidentiality or integrity, and no code execution is enabled by this vulnerability alone.
Mitigation Recommendations
A fix is available in OpenClaw version 2026.8.1. Users should upgrade to this version to address the vulnerability. Until upgraded, operators should exercise caution when approving skill archive installations, especially from untrusted sources. No other mitigations are specified.
OpenClaw (npm package 'openclaw') versions >= 2026.5.28 and < 2026.8.1 mishandle archive listings in the tar.bz2 skill installer: bounded… (CVE-2026-100542)
Description
OpenClaw npm package versions from 2026.5.28 up to but not including 2026.8.1 contain a vulnerability in the tar.bz2 skill installer. The vulnerability involves mishandling archive listings where bounded command-output suffixes were incorrectly treated as complete archive listings. This allows a crafted skill archive to bypass entry count and size checks, resulting in extraction of over-limit files or entries that consume disk space or inodes. The flaw does not enable execution of archive contents by itself. The issue is fixed in version 2026.8.1.
CVSS v3.1
Score 3.1low
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
OpenClaw versions >=2026.5.28 and <2026.8.1 improperly handle archive listings in the tar.bz2 skill installer by treating bounded command-output suffixes as complete listings. This flaw allows a maliciously crafted .tar.bz2 or .tbz2 skill archive to push prohibited entries out of retained listings, bypassing entry count and size checks. Consequently, the archive is extracted fully, potentially persisting over-limit files or entries in the skill tools directory, which can consume excessive disk space or inodes. The vulnerability does not enable direct execution of archive contents. The issue is resolved in version 2026.8.1.
Potential Impact
An attacker who convinces an operator to approve installation of a malicious or compromised skill archive can cause the skill tools directory to contain more files or entries than intended, consuming disk space or inodes beyond configured limits. This may lead to resource exhaustion on the system. There is no direct impact on confidentiality or integrity, and no code execution is enabled by this vulnerability alone.
Mitigation Recommendations
A fix is available in OpenClaw version 2026.8.1. Users should upgrade to this version to address the vulnerability. Until upgraded, operators should exercise caution when approving skill archive installations, especially from untrusted sources. No other mitigations are specified.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-5966-v5hf-7x84
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-100542"]
- Database Specific Severity
- LOW
- Cvss Version
- 3.1
Threat ID: 6ab74f2ff7a7c54106e13858
Added to database: 09/26/2026, 04:50:55 UTC
Last enriched: 09/26/2026, 04:56:50 UTC
Last updated: 09/27/2026, 01:47:40 UTC
Views: 19
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.