{"data":{"id":"71623962-9316-4cb2-b500-ddfb099817e0","title":"GHSA-r6h2-5gqq-v5v6: OpenClaw: Reject symlinks in local skill packaging script","summary":"A local helper script in OpenClaw, `skills/skill-creator/scripts/package_skill.py`, followed symlinks while building `.skill` archives. When an author runs it on a crafted skill directory containing symlinks to files outside the skill root, the archive can include unintended file contents. The issue affects `openclaw` (npm) versions `<= 2026.2.17` and is rated Low severity, since it requires local execution and is not reachable through the gateway or chat runtime.","solution":"Reject symlinks during skill packaging, add regression tests for symlink file and symlink directory cases, and update packaging guidance to document the symlink restriction. The planned patched version is 2026.2.18.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-r6h2-5gqq-v5v6","publishedAt":"2026-02-20T21:05:45.000Z","cveId":"CVE-2026-27485","cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":["openclaw@<= 2026.2.18 (fixed: 2026.2.19)"],"affectedPackageNames":["openclaw"],"affectedPackageRefs":["npm:openclaw"],"affectedVendors":[],"affectedVendorsRaw":["OpenClaw"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00249,"epssCheckedAt":"2026-11-04T12:08:33.171Z","kevDateAdded":null,"advisoryAliases":["GHSA-r6h2-5gqq-v5v6"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":null,"fixReleasedAt":"2026-02-19T16:05:33.610Z","daysToFix":-1,"fixCheckedAt":"2026-10-29T21:40:46.364Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"openclaw","fixedVersion":"2026.2.19","matchedVersion":"2026.2.19","fixReleasedAt":"2026-02-19T16:05:33.610Z","daysToFix":-1,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:40:46.217Z"}]}}