Which versions of OpenClaw are affected by CVE-2026-43567?

OpenClaw versions prior to 2026.4.10 contain a path traversal vulnerability in the screen_record tool that allows authenticated users to write files outside designated workspace boundaries,…. A patch is available.

How to fix or mitigate CVE-2026-43567?

Within 24 hours: Inventory all OpenClaw deployments and identify systems running versions before 2026.4.10. Within 7 days: Upgrade all affected OpenClaw instances to version 2026.4.10 or later (current release 2026.4.14 recommended). Within 30 days: Conduct access log review for the screen_record tool to identify any suspicious outPath parameter usage patterns during the vulnerability window.

OpenClaw CVE-2026-43567

Q: What is the CVSS score of CVE-2026-43567?

CVE-2026-43567 has a CVSS 4.0 base score of 7.1 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-27285 HIGH

Missing Authorization (CWE-862)

2026-05-05 VulnCheck

Authentication Bypass Path Traversal Openclaw

7.1

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

7.1 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Analysis Updated

May 05, 2026 - 12:46 vuln.today

v2 (cvss_changed)

Re-analysis Queued

May 05, 2026 - 12:37 vuln.today

cvss_changed

Severity Changed

May 05, 2026 - 12:37 NVD

MEDIUM HIGH

CVSS changed

May 05, 2026 - 12:37 NVD

6.5 (MEDIUM) 7.1 (HIGH)

Source Code Evidence Fetched

May 05, 2026 - 12:21 vuln.today

Analysis Generated

May 05, 2026 - 12:21 vuln.today

DescriptionCVE.org

OpenClaw before 2026.4.10 contains a path traversal vulnerability in the screen_record tool's outPath parameter that bypasses workspace-only filesystem guards. Attackers can exploit this by specifying an outPath outside the workspace boundary to write files to unintended locations on the system.

AnalysisAI

Path traversal in OpenClaw's screen_record tool allows authenticated users to write files outside workspace boundaries via crafted outPath parameters, bypassing filesystem security controls. OpenClaw versions before 2026.4.10 are affected. Vendor-released patch available (version 2026.4.10 and later, including current release 2026.4.14). No active exploitation confirmed (CISA KEV negative), but publicly documented vulnerability with working proof-of-concept code in GitHub commit diff. CVSS 7.1 with high integrity impact reflects potential for unauthorized file system modifications outside intended workspace scope.

Technical ContextAI

OpenClaw is an npm package providing agent-based tooling with filesystem operations. The vulnerability resides in the node-host screen recording tool (screen_record action) which accepts an outPath parameter for output file location. The affected component implements workspace-root guard logic intended to confine file writes to designated workspace directories. Per CWE-862 (Missing Authorization), the vulnerable code failed to apply workspace boundary validation to the screen_record tool's outPath parameter before passing it to file write operations. The fix in commit 635bb35b applies the assertSandboxPath function to validate outPath against workspace boundaries, normalizing relative paths to absolute workspace paths and mapping sandbox container paths to host root when sandboxContainerWorkdir is configured. Test coverage in openclaw-tools.nodes-workspace-guard.test.ts demonstrates the corrected behavior: path traversal attempts like '../../../etc/passwd' now trigger 'Path escapes sandbox root' errors during the assertSandboxPath validation step.

RemediationAI

Upgrade OpenClaw to version 2026.4.10 or later via npm. The vendor-confirmed patched version 2026.4.10 contains fix commit 635bb35b68d8faa5bfa2fda35feadd315122748a from PR #63551. Current stable release 2026.4.14 includes the fix. Run 'npm update openclaw' or specify 'openclaw@^2026.4.10' in package.json dependencies. Vendor advisory at https://github.com/openclaw/openclaw/security/advisories/GHSA-jf25-7968-h2h5 and patch commit at https://github.com/openclaw/openclaw/commit/635bb35b68d8faa5bfa2fda35feadd315122748a provide implementation details. If immediate upgrade is not feasible, implement compensating controls: disable the screen_record tool entirely by removing it from available agent tools, restrict authenticated user access to only trusted administrators, implement additional server-side path validation in proxy layers before OpenClaw processes outPath parameters (validate against allowlists of permitted output directories), or run OpenClaw in containerized environments with read-only filesystem mounts except for explicitly allowed workspace directories (note this may impact legitimate screen recording functionality). Monitor filesystem access logs for writes outside workspace boundaries as detection control. Compensating controls reduce functionality and should be temporary measures only.