{"action":"Upgrade openclaw to 2026.2.15 or later.","affected":[{"fixed":"2026.2.15","introduced":"0"}],"component":"openclaw","cve_ids":["CVE-2026-27008"],"ecosystem":"npm","epss":0.00186,"exploited":false,"fixed_versions":["2026.2.15"],"ghsa_id":"GHSA-h7f7-89mm-pqh6","id":"tcs_01M5KFTERJVWZBT4H5WFCQ1455","modified_at":"2026-02-20T17:04:15.969918Z","published_at":"2026-02-18T22:44:18Z","references":["https://osv.dev/vulnerability/GHSA-h7f7-89mm-pqh6","https://github.com/openclaw/openclaw/security/advisories/GHSA-h7f7-89mm-pqh6","https://nvd.nist.gov/vuln/detail/CVE-2026-27008","https://github.com/openclaw/openclaw/commit/2363e1b0853a028e47f90dcc1066e3e9809d65f1","https://github.com/openclaw/openclaw/commit/b6305e97256d67e439719faacf5af3de9727d6e1","https://github.com/openclaw/openclaw","https://github.com/openclaw/openclaw/releases/tag/v2026.2.15"],"severity":{"label":"medium","score":6.7},"sources":[{"source":"osv","source_id":"GHSA-h7f7-89mm-pqh6","url":"https://osv.dev/vulnerability/GHSA-h7f7-89mm-pqh6"},{"source":"nvd","source_id":"CVE-2026-27008","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-27008"}],"summary":"OpenClaw hardened the skill download target directory validation"}