CVE-2026-108156
HighCVSS 7.1Summary
LobsterAI 2026.5.27 through 2026.9.23 contains an external control of file path vulnerability in the skills:delete IPC handler that trusts the openclawSourceDir value from a skill's _meta.json during uninstall. Attackers who convince a user to install a crafted skill can make uninstallation recursively delete arbitrary user-writable directories, such as the home directory.
Risk Assessment
Massive user data loss is possible, including deletion of the home directory, leading to work disruption and irreversible file loss.
Recommendation
Upgrade LobsterAI beyond 2026.9.23, validate _meta.json contents before uninstall, and restrict privileges of the skills:delete IPC handler.
Other vulnerabilities in LobsterAI
See all- CVE-2026-90818Medium
A vulnerability has been discovered in netease-youdao LobsterAI (versions 2026.6.15, 2026.8.28, 2026.9.3, 2026.9.4) in the function OpenClawConfigSync.buildBrowserConfig, leading to server-side request forgery. The attack can be launched remotely, and the exploit has been publicly released.
- CVE-2026-18995Medium
A flaw has been found in netease-youdao LobsterAI 2026.6.10, affecting the function parseMediaTokensFromText in the file src/renderer/services/artifactParser.ts in the MEDIA Path Handler component. This manipulation causes information disclosure. The attack is possible to be carried out remotely, and the exploit has been published.
Original NVD description (English source)
LobsterAI 2026.5.27 through 2026.9.23 contains an external control of file path vulnerability in the skills:delete IPC handler that trusts the openclawSourceDir value from a skill's _meta.json during uninstall. Attackers who convince a user to install a crafted skill can make uninstallation recursively delete arbitrary user-writable directories, such as the home directory, since the security scanner never inspects _meta.json.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS