Symlink Traversal Vulnerability in OpenClaw ZIP Extraction
Summary
GHSA-jxrq-8fm4-9p58: OpenClaw: Zip extraction symlink traversal could write outside destination. Affects openclaw versions < 2026.2.22. Fixed in 2026.2.22. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
OpenClaw is an open-source package designed for handling ZIP file extractions in Node.js applications. It provides a straightforward interface for developers to manage archives efficiently. However, a recent vulnerability has been identified that allows for path confinement bypass during ZIP extraction, potentially leading to unauthorized file writes outside the intended destination.
Vulnerability Detail
The vulnerability arises from a flaw in the ZIP extraction logic located in the src/infra/archive.ts file. The checks for output paths are lexical, which means that if a symlink exists in the destination path segments, it can be exploited to write files outside the designated extraction root. This could allow an attacker to manipulate the extraction process, leading to arbitrary file writes in unintended locations. The impact is significant, especially in environments where ZIP files are extracted from untrusted sources.
How To Fix
Latest published version: 2026.10.6 as of 22 Oct 2026
npm install openclaw@2026.10.6Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
2026.2.22
This is the first release that contains the fix.
npm install openclaw@2026.2.22Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, ensure that no symlinks exist in the destination path before performing ZIP extractions. This can be done by checking the directory structure and removing any symlinks that could be exploited.
Conclusion
The OpenClaw package has a significant vulnerability that allows for symlink traversal during ZIP extraction, leading to potential unauthorized file writes. It is crucial to update to the patched version 2026.2.22 to mitigate this risk. Additionally, using tools like Vulert can help monitor for such vulnerabilities in real-time.
See every vulnerability recorded for openclaw →
FAQ
The vulnerability allows for arbitrary file writes outside the intended extraction root due to symlink traversal during ZIP extraction.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. By checking your package-lock.json file, you can identify if your application is affected by this vulnerability.
The CVSS score of this vulnerability is 7.1, indicating a high severity level.
Yes, you can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
If you cannot update the package immediately, ensure that there are no symlinks in the extraction path as a temporary measure to mitigate the risk.
References
Related vulnerabilities
Recent vulnerabilities recorded for openclaw.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
