6.5

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-h89v-j3x9-8wqj

GHSA-h89v-j3x9-8wqj: OpenClaw affected by denial of service through unguarded archive extraction allowing high expansion/resource abuse (ZIP/TAR)

Summary

Archive extraction lacked strict resource budgets, allowing high-expansion ZIP/TAR archives to consume excessive CPU/memory/disk during install/update flows.

Affected Packages / Versions

openclaw (npm): <= 2026.2.13
clawdbot (npm): <= 2026.1.24-3

Details

Affected component: src/infra/archive.ts (extractArchive).

The extractor now enforces resource budgets (entry count and extracted byte limits; ZIP also enforces a compressed archive size limit) and rejects over-budget archives.

Fix Commit(s)

openclaw/openclaw@d3ee5deb87ee2ad0ab83c92c365611165423cb71
openclaw/openclaw@5f4b29145c236d124524c2c9af0f8acd048fbdea

Release Process Note

This advisory will be updated with patched versions once the next npm release containing the fix is published.

Credits

Thanks @vincentkoc for reporting.

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-h89v-j3x9-8wqj

GHSA-h89v-j3x9-8wqj:

6.5

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	< 2026.2.14	2026.2.14
clawdbot	npm	<= 2026.1.24-3

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability lies in the extractArchive function in src/infra/archive.ts, which is responsible for handling both TAR and ZIP file extraction. The advisory correctly points to this function. An analysis of the patch commits confirms that this function and its helper extractZip were missing crucial resource consumption limits.

The root cause of the vulnerability was the lack of validation on the contents of user-provided archives. Maliciously crafted TAR or ZIP files (e.g., "zip bombs") could contain a huge number of files or files that decompress to a very large size. The original code would attempt to extract these without any checks, leading to excessive consumption of CPU, memory (especially for ZIP files loaded into memory), and disk space, resulting in a denial of service.

The patch d3ee5deb87ee2ad0ab83c92c365611165423cb71 rectifies this by introducing a new ArchiveExtractLimits type and applying these limits within both extractArchive (for TARs) and extractZip. The new logic checks:

The size of the compressed archive itself (for ZIPs).
The total number of entries (files/directories) in the archive.
The uncompressed size of each individual file.
The total uncompressed size of all files combined.

If any of these limits are exceeded during extraction, the process is aborted, preventing the denial of service. The vulnerable functions are extractArchive and the internal extractZip because they contained the flawed logic that processed archives without these essential safeguards.

Vulnerable functions

extractArchive

src/infra/archive.ts

This is the main function responsible for orchestrating archive extraction. Prior to the patch, it lacked controls for TAR archive extraction, allowing an archive with a large number of files or large file sizes to consume excessive disk space and CPU. The function was also not passing any limits down to the ZIP extraction logic. The patch introduces resource limits by adding the `onReadEntry` handler for TAR files to count entries and track extracted bytes, and by passing limits to the `extractZip` function

extractZip

src/infra/archive.ts

This function, called by `extractArchive`, handles the extraction of ZIP files. Before the patch, it would load the entire ZIP file into memory and extract its contents without any size validation. This made it vulnerable to "zip bomb" attacks, where a small, compressed archive expands to an extremely large size, consuming excessive memory and disk space, leading to a denial of service. The patch adds multiple checks: a limit on the compressed archive size, the number of entries, the size of each extracted file, and the total size of all extracted files.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.

6.5

-

Basic Information

Basic Information

Concerned about an active attack path?

GHSA-h89v-j3x9-8wqj: OpenClaw affected by denial of service through unguarded archive extraction allowing high expansion/resource abuse (ZIP/TAR)

Summary

Affected Packages / Versions

Details

Fix Commit(s)

Release Process Note

Credits

GHSA-h89v-j3x9-8wqj:

6.5

-

Basic Information

Basic Information

Is this CVE running in your environment?

Technical Details

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Vulnerability IntelligenceMiggo AI

Unlock WAF rules for this CVE

WAF Protection Rules

WAF Rule

Reasoning

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

GHSA-h89v-j3x9-8wqj: OpenClaw affected by denial of service through unguarded archive extraction allowing high expansion/resource abuse (ZIP/TAR)

Summary

Affected Packages / Versions

Details

Fix Commit(s)

Release Process Note

Credits

Technical Details

6.5

6.5

Basic Information

Basic Information

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI