PT-2026-21336 · Openclaw · Openclaw

Aether-Ai-Agent · Published 2026-02-20 · Updated 2026-03-01 · CVE-2026-27485

Positive Technologies (AI Summary)

CVSS v4.0

4.6

Medium

Base vector

AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions OpenClaw versions 2026.2.17 and earlier

Description OpenClaw, a personal AI assistant, contains an issue in the skills/skill-creator/scripts/package skill.py script. This script previously followed symbolic links when creating .skill archives. If an author runs this script on a crafted skill directory containing symlinks to files outside the skill root, the resulting archive can include unintended file contents. This can lead to the potential unintentional disclosure of local files from the packaging machine into a generated .skill artifact. Exploitation requires local execution of the packaging script on attacker-controlled skill contents. The vulnerable component is the package skill.py script.

Recommendations Versions prior to 2026.2.18 are affected. Reject symlinks during skill packaging. Add regression tests for symlink file and symlink directory cases. Update packaging guidance to document the symlink restriction.

Exploit

Fix

Weakness Enumeration

CWE-61

Related Identifiers

CVE-2026-27485

GHSA-R6H2-5GQQ-V5V6

Affected Products

Openclaw

References · 17

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/27xxx/CVE-2026-27485.json · Exploit
• https://github.com/openclaw/openclaw/commit/ee1d6427b544ccadd73e02b1630ea5c29ba9a9f0 · Patch
• https://github.com/openclaw/openclaw/commit/c275932aa4230fb7a8212fe1b9d2a18424874b3f · Patch
• https://github.com/openclaw/openclaw/security/advisories/GHSA-r6h2-5gqq-v5v6 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-27485 · Security Note
• https://osv.dev/vulnerability/CVE-2026-27485 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-r6h2-5gqq-v5v6 · Vendor Advisory
• https://github.com/openclaw/openclaw · Note
• https://github.com/openclaw/openclaw/releases/tag/v2026.2.19 · Note
• https://github.com/openclaw/openclaw/pull/20796 · Note
• https://t.me/cveNotify/152717 · Telegram Post
• https://twitter.com/_cvereports/status/2025173822689755373 · Twitter Post
• https://t.me/CVEtracker/45373 · Telegram Post
• https://twitter.com/tau_rho_ai/status/2025181819302281569 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2025167816664527296 · Twitter Post