1 matches found
OpenClaw hardened the skill download target directory validation
Affected Packages / Versions - Package: openclaw npm - Affected versions: = 2026.2.14 - Fixed in: planned release 2026.2.15 Impact A bug in download skill installation allowed targetDir values from skill frontmatter to resolve outside the per-skill tools directory if not strictly validated. In th...
6.8CVSS5.4AI score0.00166EPSS
SaveExploits0References6Affected Software1
20