A flaw in the OpenClaw skill download operation allowed the target directory path supplied in skill frontmatter to resolve outside the dedicated per‑skill tools directory. The vulnerability, identified as CWE‑73, enabled file writes to arbitrary locations when an administrator used the skills.install flow, potentially permitting overwriting of sensitive or system files.

OpenClaw by OpenClaw, all releases prior to version 2026.2.15 are affected. The issue was fixed in release 2026.2.15, so systems running that or newer versions are no longer vulnerable.

The CVSS base score is 6.8, indicating moderate severity, and the EPSS score is below 1 %, suggesting a low likelihood of exploitation. It is not listed in the CISA KEV catalog. An attacker with administrative rights to install skills could exploit the flaw by crafting a skill that directs file output to a location outside the intended sandbox, thereby modifying or replacing arbitrary files.