CVE-2026-27485

OpenClaw is a personal AI assistant. In versions 2026.2.17 and below, skills/skill-creator/scripts/package_skill.py (a local helper script used when authors package skills) previously followed symlinks while building .skill archives. If an author runs this script on a crafted local skill directory containing symlinks to files outside the skill root, the resulting archive can include unintended file contents. If exploited, this vulnerability can lead to potential unintentional disclosure of local files from the packaging machine into a generated .skill artifact, but requires local execution of the packaging script on attacker-controlled skill contents. This issue has been fixed in version 2026.2.18.

• CWE-61

• https://github.com/openclaw/openclaw/commit/c275932aa4230fb7a8212fe1b9d2a18424874b3fPatch
• https://github.com/openclaw/openclaw/commit/ee1d6427b544ccadd73e02b1630ea5c29ba9a9f0Patch
• https://github.com/openclaw/openclaw/pull/20796Issue Tracking
• https://github.com/openclaw/openclaw/releases/tag/v2026.2.19Release Notes
• https://github.com/openclaw/openclaw/security/advisories/GHSA-r6h2-5gqq-v5v6Mitigation, Vendor Advisory

Published

Feb 21, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-2748SEPPmail Secure Email Gateway before version 15.0.1 improper…5.3
• CVE-2026-27480Static Web Server (SWS) is a production-ready web server sui…5.3
• CVE-2026-27481Discourse is an open-source discussion platform. From versio…5.3
• CVE-2026-27482Ray is an AI compute engine. In versions 2.53.0 and below, t…6.5
• CVE-2026-27483MindsDB is a platform for building artificial intelligence f…8.8
• CVE-2026-27484OpenClaw is a personal AI assistant. In versions 2026.2.17 a…4.3
• CVE-2026-27486OpenClaw is a personal AI assistant. In versions 2026.2.13 a…5.3
• CVE-2026-27487OpenClaw is a personal AI assistant. In versions 2026.2.13 a…8
• CVE-2026-27488OpenClaw is a personal AI assistant. In versions 2026.2.17 a…7.3
• CVE-2026-27489Open Neural Network Exchange (ONNX) is an open standard for …7.5
• CVE-2026-2749Vulnerability in Centreon Centreon Open Tickets on Central S…8.8
• CVE-2026-27491Discourse is an open-source discussion platform. Prior to ve…4.3