Low
OpenClaw before 2026.8.1 Extraction Limit Bypass via tar.bz2
Type: advisorySource: Official CVE List
OpenClaw (npm package 'openclaw') versions >= 2026.5.28 and < 2026.8.1 mishandle archive listings in the tar.bz2 skill installer: bounded command-output suffixes were treated as complete listings of the archive. A cra…
Products: OpenClawCVEs: CVE-2026-100542