[openclaw] OpenClaw's sandbox skill mirroring path traversal vulnerability could write outside the sandbox workspace

**[openclaw] OpenClaw's sandbox skill mirroring path traversal vulnerability could write outside the sandbox workspace**

Overview In affected versions, OpenClaw’s sandbox skill mirroring used the skill’s frontmatter name as part of the destination path when copying skills into the sandbox workspace. A crafted skill name containing traversal segments (for example ../) or an absolute path could cause the copy to write outside <sandbox_workspace>/skills/. Impact Files may be written outside the sandbox workspace root (within the permissions of the user running OpenClaw). Attack Requirements Attacker can provide a skill package (controls SKILL.md frontmatter). Victim runs with sandbox enabled and skill mirroring into the sandbox workspace...

---

**[devsupporter 해설]**

이 기사는 GitHub Security Advisories에서 제공하는 최신 개발 동향입니다. 관련 도구나 기술에 대해 더 알아보시려면 원본 링크를 참고하세요.