CVE-2026-100542: OpenClaw before 2026.8.1 Extraction Limit Bypass via tar.bz2
OpenClaw (npm package 'openclaw') versions >= 2026.5.28 and < 2026.8.1 mishandle archive listings in the tar.bz2 skill installer: bounded command-output suffixes were treated as complete listings of the archive. A crafted .tar.bz2/.tbz2 skill archive can push prohibited entries out of both retained listings so that entry-count and size checks pass, and the archive is then extracted in full. If an operator approves installation of such a malicious or compromised skill archive, over-limit files or entry counts are persisted in the skill tools directory, consuming disk space or inodes. The issue bypasses OpenClaw's extraction budgets but does not by itself execute archive contents. Fixed in 2026.8.1.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
npm/openclawto a version that resolves this vulnerability.Fixed in 2026.8.1
Event History
Frequently Asked Questions
Who is exposed to this issue?
OpenClaw installations using versions 2026.5.28 through versions earlier than 2026.8.1 are affected when an operator installs a crafted or compromised .tar.bz2 or .tbz2 skill archive. Exploitation requires the operator to approve the archive installation.
Does exploitation execute code from the malicious archive?
No. The issue bypasses extraction entry-count and size budgets, causing over-limit files or entry counts to be extracted into the skill tools directory, but it does not by itself execute archive contents.
What is the practical impact of a successful exploit?
A malicious archive can cause excessive files or archive contents to be persisted in the skill tools directory. This can consume disk space or exhaust inodes.
What should be done if upgrading is not immediately possible?
Do not approve installation of untrusted or potentially compromised .tar.bz2 or .tbz2 skill archives. The provided data does not identify another mitigation that enforces the bypassed extraction budgets.