OpenClaw vulnerable to path traversal (Zip Slip) in archive extraction during explicit installation commands

MEDIUM 5.5CVE-2026-28486 · GHSA-v892-hwpg-jwqp · Published 05/03/2026 · updated 17/06/2026

In short

CVE-2026-28486 is a MEDIUM (CVSS 5.5) vulnerability affecting openclaw (openclaw), openclaw.
Chance of exploitation in the next 30 days (EPSS): 0.18%, higher than 7.3% of all vulnerabilities.
Fix: update to 2026.2.14 or later.

Package	Affected versions	Patched versions
openclaw openclaw	`= 2026.1.16-2≥ 2026.1.20, < 2026.2.14`	`2026.2.14`
openclaw npm	`≥ 2026.1.16-2, < 2026.2.14`	`2026.2.14`

Description

Summary

A path traversal (Zip Slip) issue in archive extraction during explicit installation commands could allow a crafted archive to write files outside the intended extraction directory.

Affected Packages / Versions

Package: openclaw (npm)
Affected versions: >=2026.1.16-2 <2026.2.14
Fixed version: 2026.2.14

Affected Commands / Flows

This only affects users who run installation commands against an untrusted archive (local file or download URL), for example:

openclaw skills install (download+extract installers)
openclaw hooks install (archive installs)
openclaw plugins install (archive installs)
openclaw signal install (signal-cli asset extraction)

It is not triggered by receiving messages or normal gateway operation.

Impact

Arbitrary file write as the current user. In the worst case this can be used for persistence or code execution if an attacker can convince a user to install a crafted archive.

Fix

Fix commit: 3aa94afcfd12104c683c9cad81faf434d0dadf87
Released in: 2026.2.14

Credits

OpenClaw thanks @markmusson for reporting.

NVD description

OpenClaw versions 2026.1.16-2 prior to 2026.2.14 contain a path traversal vulnerability in archive extraction during installation commands that allows arbitrary file writes outside the intended directory. Attackers can craft malicious archives that, when extracted via skills install, hooks install, plugins install, or signal install commands, write files to arbitrary locations enabling persistence or code execution.

References

openclaw/openclaw security advisory · WEB
nvd.nist.gov/vuln/detail/CVE-2026-28486 · ADVISORY
openclaw/openclaw commit 3aa94af · WEB
openclaw/openclaw · PACKAGE
vulncheck.com/advisories/openclaw-path-traversal-zip-slip-in-archive-extraction-via-installation-commands · WEB

More vulnerabilities in openclaw

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

openclaw

= 2026.1.16-2≥ 2026.1.20, < 2026.2.14

2026.2.14

openclaw

npm

≥ 2026.1.16-2, < 2026.2.14

2026.2.14

Description

Summary

A path traversal (Zip Slip) issue in archive extraction during explicit installation commands could allow a crafted archive to write files outside the intended extraction directory.

Affected Packages / Versions

Package: openclaw (npm)
Affected versions: >=2026.1.16-2 <2026.2.14
Fixed version: 2026.2.14

Affected Commands / Flows

This only affects users who run installation commands against an untrusted archive (local file or download URL), for example:

openclaw skills install (download+extract installers)
openclaw hooks install (archive installs)
openclaw plugins install (archive installs)
openclaw signal install (signal-cli asset extraction)

It is not triggered by receiving messages or normal gateway operation.

Impact

Arbitrary file write as the current user. In the worst case this can be used for persistence or code execution if an attacker can convince a user to install a crafted archive.

Fix

Fix commit: 3aa94afcfd12104c683c9cad81faf434d0dadf87
Released in: 2026.2.14

Credits

OpenClaw thanks @markmusson for reporting.

NVD description

More vulnerabilities in openclaw

See all →