Crabbox before version 0.9.0 allows attackers to craft a malicious configuration file that contains path traversal sequences. The vulnerable workspace resolution improperly validates absolute or relative paths, enabling the program to delete or overwrite arbitrary files on the host system when sync.delete is enabled. This flaw could result in loss of critical data or system files, leading to denial of service or compromise of configuration integrity.

OpenClaw Crabbox in all releases prior to 0.9.0. The vulnerability applies to any deployment of Crabbox that processes external .crabbox.yaml or crabbox.yaml files and uses the Islo provider for workspace preparation.

The CVSS score of 6.8 indicates a moderate to high severity. The EPSS score is not available. The vulnerability is not listed in CISA’s KEV catalog. The likely attack vector is remote: an attacker can supply a crafted configuration file through any interface that accepts .crabbox.yaml payloads. Once processed and if sync.delete is active, the attacker’s payload will execute filesystem operations outside the intended workspace, leading to arbitrary file deletion or overwrite.