Description
OpenClaw (npm package 'openclaw') versions >= 2026.5.28 and < 2026.8.1 mishandle archive listings in the tar.bz2 skill installer: bounded command-output suffixes were treated as complete listings of the archive. A crafted .tar.bz2/.tbz2 skill archive can push prohibited entries out of both retained listings so that entry-count and size checks pass, and the archive is then extracted in full. If an operator approves installation of such a malicious or compromised skill archive, over-limit files or entry counts are persisted in the skill tools directory, consuming disk space or inodes. The issue bypasses OpenClaw's extraction budgets but does not by itself execute archive contents. Fixed in 2026.8.1.
Published: 2026-09-26
Score: 2.3 Low
EPSS: < 1% Very Low
KEV: No
Impact: Disk or inode depletion
Action: Patch
AI Analysis

Impact

OpenClaw versions from 2026.5.28 to before 2026.8.1 mishandle the listing of tar.bz2 archives used for skill installers. A crafted archive can replace the reported entry list with entries that exceed the allowed limits, causing the extraction process to create files beyond the intended budget. The flaw does not launch code, but it allows over‑limit files or excessive entry counts to be written to the skill tools directory, which can later consume significant disk space or inode resources.

Affected Systems

OpenClaw (npm package 'openclaw') skill installer in all releases between 2026.5.28 and 2026.8.0 inclusive. The issue specifically targets the handling of tar.bz2 and tbz2 archives used to install new skills.

Risk and Exploitability

The CVSS score of 2.3 marks this vulnerability as low severity. No EPSS data is available and the vulnerability has not been listed in the CISA KEV catalog, indicating a low likelihood of widespread exploitation. Attackers would need to persuade an operator to approve a malicious skill archive or gain control of the approval process; otherwise the flaw cannot execute arbitrary code or elevate privileges. If successfully triggered, the result is limited to denial of service through exhausting storage resources.

Generated by OpenCVE AI on September 26, 2026 at 04:49 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade OpenClaw to version 2026.8.1 or newer, which removes the extraction budget bypass bug.
  • Disable automatic skill installation and only install skill archives after reviewing their contents and verifying the archive is trusted.
  • Configure disk‑space and inode‑usage monitoring for the skill tools directory and set alerts when thresholds are approached to detect potential resource exhaustion early.

Generated by OpenCVE AI on September 26, 2026 at 04:49 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 28 Sep 2026 18:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Sat, 26 Sep 2026 02:30:00 +0000

Type Values Removed Values Added
Description OpenClaw (npm package 'openclaw') versions >= 2026.5.28 and < 2026.8.1 mishandle archive listings in the tar.bz2 skill installer: bounded command-output suffixes were treated as complete listings of the archive. A crafted .tar.bz2/.tbz2 skill archive can push prohibited entries out of both retained listings so that entry-count and size checks pass, and the archive is then extracted in full. If an operator approves installation of such a malicious or compromised skill archive, over-limit files or entry counts are persisted in the skill tools directory, consuming disk space or inodes. The issue bypasses OpenClaw's extraction budgets but does not by itself execute archive contents. Fixed in 2026.8.1.
Title OpenClaw before 2026.8.1 Extraction Limit Bypass via tar.bz2
First Time appeared Openclaw
Openclaw openclaw
Weaknesses CWE-400
CPEs cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:*
Vendors & Products Openclaw
Openclaw openclaw
References
Metrics cvssV3_1

{'score': 3.1, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L'}

cvssV4_0

{'score': 2.3, 'vector': 'CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N'}

Subscriptions

Openclaw Openclaw
cve-icon MITRE

Status: PUBLISHED

Assigner: VulnCheck

Published:

Updated: 2026-09-28T17:45:49.475Z

Reserved: 2026-09-26T01:01:36.095Z

Link: CVE-2026-100542

cve-icon Vulnrichment

Updated: 2026-09-28T17:45:43.944Z

cve-icon NVD

Status : Deferred

Published: 2026-09-26T03:17:00.140

Modified: 2026-09-28T18:17:12.220

Link: CVE-2026-100542

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-26T06:30:03Z

Weaknesses
  • CWE-400

    Uncontrolled Resource Consumption