AI agent vulnerability · OpenClaw

GHSA-77hf-7fqf-f227: OpenClaw skills-install-download: tar.bz2 extraction bypassed archive safety parity checks (local DoS)

mediumCVSS 3.1 5.5

Summary The tar.bz2 installer path in src/agents/skills-install-download.ts used shell tar preflight/extract logic that did not share the same hardening guarantees as the centralized archive extractor. This allowed crafted .tar.bz2 archives to bypass special-entry blocking and extracted-size guardrails enforced on other archive paths, causing local availability impact during skill install.

Published Mar 3, 2026

Affected packages

openclaw

Ecosystem: npm
Affected: <= 2026.3.1
Fixed in: 2026.3.2
Check: npm ls openclaw

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

Summary

The tar.bz2 installer path in src/agents/skills-install-download.ts used shell tar preflight/extract logic that did not share the same hardening guarantees as the centralized archive extractor.

This allowed crafted .tar.bz2 archives to bypass special-entry blocking and extracted-size guardrails enforced on other archive paths, causing local availability impact during skill install.

Affected Packages / Versions

Package: openclaw (npm)
Latest published at triage time: 2026.3.1
Affected range: <= 2026.3.1
Patched in: 2026.3.2 (released)

Impact

Local DoS / availability impact when processing untrusted .tar.bz2 skill archives.

Fix Commit(s)

0dbb92dd2bcf9a32379d11c0f11ed016669dae3e

Related advisories

Canonical overlap (closed): GHSA-3pj7-x8jr-jvj8
Duplicate variant (closed): GHSA-rgr7-g85h-6v82

Credited to GCXWLP.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More OpenClaw vulnerabilities

All OpenClaw entries