Path Traversal Vulnerability in 8421bit MiniClaw Affected by ExecuteSkillScript Process
CVE-2026-8113

5.3MEDIUM

Key Information:

Vendor: 8421bit
Status: Miniclaw
Vendor: CVE Published:; 7 May 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-8113?

A path traversal vulnerability has been identified in the 8421bit MiniClaw, specifically within the isPathInside function located in src/kernel.ts as part of the executeSkillScript component. This flaw allows an attacker to manipulate file paths, potentially leading to unauthorized access to critical files on the system. The vulnerability is exploitable remotely, which raises significant security concerns. It is important to note that while a patch has been made available (commit e8bd4e17e9428260f2161378356affc5ce90d6ed), maintaining awareness of this issue is crucial for all users of the MiniClaw product, as affected versions may continue to face exploitation risks.

Affected Version(s)

MiniClaw 43905b934cf76489ab28e4d17da28ee97970f91f

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-8113 - Proof of Concept