Path Traversal Vulnerability in OpenClaw: Risk of Arbitrary File Write
Summary
GHSA-v892-hwpg-jwqp: A path traversal (Zip Slip) issue in archive extraction during explicit installation commands could allow a crafted archive to write files outside the intended extraction directory. Affects openclaw versions >= 2026.1.16-2, < 2026.2.14. Fixed in 2026.2.14. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
OpenClaw is an npm package designed for managing skills, hooks, plugins, and signals in a modular way. It allows users to easily install and manage various components through simple commands. However, a recent vulnerability has been identified that exposes users to potential risks when extracting archives from untrusted sources.
Vulnerability Detail
The vulnerability stems from a path traversal (Zip Slip) issue during the extraction of archives when executing installation commands. This flaw allows a maliciously crafted archive to write files outside the intended extraction directory, leading to arbitrary file writes as the current user. If exploited, this could enable an attacker to achieve persistence or execute arbitrary code by convincing a user to install a compromised archive.
How To Fix
Latest published version: 2026.10.6 as of 22 Oct 2026
npm install openclaw@2026.10.6Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
2026.2.14
This is the first release that contains the fix.
npm install openclaw@2026.2.14Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, avoid running installation commands against untrusted archives. Always verify the source of the archive before proceeding with the installation.
Conclusion
In summary, the path traversal vulnerability in OpenClaw poses a significant risk to users who install archives from untrusted sources. It is crucial to update to the patched version 2026.2.14 and to exercise caution when handling archives.
See every vulnerability recorded for openclaw →
FAQ
It is a path traversal vulnerability that allows crafted archives to write files outside the intended extraction directory.
If you are using OpenClaw version 2026.1.16-2 or earlier, your version is affected by this vulnerability.
The vulnerability can lead to arbitrary file writes, which may result in unauthorized access, persistence, or code execution.
Yes, the vulnerability has been fixed in version 2026.2.14 of OpenClaw.
You can use Vulert, which monitors and alerts in real-time for open-source vulnerabilities using just the package-lock.json file. You can also check if your application is affected by this vulnerability using the Vulert playground.
References
Related vulnerabilities
Recent vulnerabilities recorded for openclaw.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.