CVE-2026-108156— LobsterAI 2026.5.27 through 2026.9.23 Arbitrary Directory Deletion via Skill _meta.json
Quick assessment
Affected
netease-youdao LobsterAI
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
LobsterAI 2026.5.27 至 2026.9.23 版本中，在 IPC 处理程序里存在外部控制文件路径漏洞。该漏洞在卸载技能时，会信任技能 文件中的 值。攻击者通过诱导用户安装精心构造的技能，可在卸载过程中递归删除任意用户可写的目录（例如主目录），因为安全扫描器从未对 文件进行检查。
Possible ATT&CK Techniques 1 AI
T1046 · Network Service DiscoveryAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| netease-youdao | LobsterAI | 2026.5.27≤ 2026.9.23 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-108156
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
LobsterAI 2026.5.27 through 2026.9.23 Arbitrary Directory Deletion via Skill _meta.json
Source: CVE Program / CVE List V5
Vulnerability Description
LobsterAI 2026.5.27 through 2026.9.23 contains an external control of file path vulnerability in the skills:delete IPC handler that trusts the openclawSourceDir value from a skill's _meta.json during uninstall. Attackers who convince a user to install a crafted skill can make uninstallation recursively delete arbitrary user-writable directories, such as the home directory, since the security scanner never inspects _meta.json.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
文件名或路径的外部可控制
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| netease-youdao | LobsterAI | 2026.5.27 ~ 2026.9.23 | - |
|
II. Public POCs for CVE-2026-108156
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-108156
请登录查看更多情报信息。
Other References for CVE-2026-108156 (5)
-
https://github.com/netease-youdao/LobsterAI/issues/2793 issue-tracking
IV. Related Vulnerabilities
Same vendor: netease-youdao
-
CVE-2026-90818
netease-youdao LobsterAI Browser Network Configuration openc -
CVE-2026-85671
QAnything 2.0.0 Unauthenticated Cross-User File Disclosure -
CVE-2026-18995
netease-youdao LobsterAI MEDIA Path artifactParser.ts parseM -
CVE-2024-12866
Local File Inclusion in netease-youdao/qanything -
CVE-2024-8026
CSRF due to overly permissive CORS headers in netease-youdao
Same weakness: CWE-73
-
CVE-2026-87685
Brocade Fabric OS任意文件操纵漏洞 -
CVE-2026-106219
TeamCity <2026.2.1 缺少 Git 子模块 URL 验证致读取本地仓库 -
CVE-2026-105748
Docling: Crafted DoclingDocument JSON embeds local image fil -
CVE-2026-103511
Arbitrary file-write via extension installation in P4Search -
CVE-2026-104809
Mitel MiVoice Office 400 Shared Object Hijacking Leading to
V. Comments for CVE-2026-108156
No comments yet