Vulnerability Database - OSV

CVE-2026-27670

github.com/openclaw/openclaw

OpenClaw < 2026.3.2 - Arbitrary File Write via ZIP Extraction Parent Symlink... 19 Mar

Fix available
Severity - 5.8 (Medium)

GHSA-r54r-wmmq-mh84

npm/openclaw

OpenClaw: ZIP extraction race could write outside destination via parent symlink rebind 03 Mar

Fix available
Severity - 8.7 (High)