LobsterAI versions 2026.5.27 through 2026.9.23 contain an external control of file path vulnerability in the skills:delete IPC handler. The handler trusts the openclawSourceDir value from a skill’s _meta.json during uninstall without validation. An attacker who convinces a user to install a crafted skill can trigger the deletion of arbitrary user‑writable directories, such as the home directory, as the uninstall process recursively removes files based on the untrusted path. This leads to loss of user data and potentially system‑wide directory contents, representing a medium severity flaw signified by a CVSS score of 6.9.

The affected product is LobsterAI developed by Netease‑Youdao, specifically versions 2026.5.27 through 2026.9.23. No other vendors or products are listed as impacted in the CNA data.

The CVSS score of 6.9 indicates a medium impact. EPSS information is not available and the vulnerability is not listed in CISA’s KEV, which suggests that widespread exploitation is not yet confirmed. Practical exploitation requires an attacker to persuade a user to install a malicious skill—most likely through social engineering or a compromised skill marketplace. Once the user performs an uninstall of that skill, the directory deletion occurs, leading to data loss. Given the need for user interaction and lack of remote code execution, the overall risk remains moderate but urgent attention is warranted.