CVE-2026-43567: Openclaw

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

OpenClaw before 2026.4.10 contains a path traversal vulnerability in the screen_record tool's outPath parameter that bypasses workspace-only filesystem guards. Attackers can exploit this by specifying an outPath outside the workspace boundary to write files to unintended locations on the system.

Affected products

• Openclaw Openclaw: before 2026.4.10 (fixed in 2026.4.10)

Published 2026-05-05. Last modified 2026-06-17.