GHSA-r6h2-5gqq-v5v6: OpenClaw: Reject symlinks in local skill packaging script
Summary
OpenClaw's skill packaging script had a vulnerability where it followed symlinks (shortcuts to files stored elsewhere on a computer) while building `.skill` archives, potentially including unintended files from outside the skill directory. This issue only affects local skill authors during packaging and has low severity since it cannot be triggered remotely through the normal OpenClaw system.
Solution / Mitigation
Reject symlinks during skill packaging. Add regression tests for symlink file and symlink directory cases. Update packaging guidance to document the symlink restriction. The fix is available in commit c275932aa4230fb7a8212fe1b9d2a18424874b3f and ee1d6427b544ccadd73e02b1630ea5c29ba9a9f0, with the patched version planned for release as openclaw@2026.2.18.
Vulnerability Details
EPSS: 0.0%
Classification
Affected Vendors
Affected Packages
Related Issues
Original source: https://github.com/advisories/GHSA-r6h2-5gqq-v5v6
First tracked: February 20, 2026 at 07:00 PM
Classified by LLM (prompt v3) · confidence: 75%