CVE-2026-43567
EUVD-2026-2728505.05.2026, 12:16
OpenClaw before 2026.4.10 contains a path traversal vulnerability in the screen_record tool's outPath parameter that bypasses workspace-only filesystem guards. Attackers can exploit this by specifying an outPath outside the workspace boundary to write files to unintended locations on the system.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| openclaw | openclaw | 𝑥 < 2026.4.10 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
Vulnerability Media Exposure