CVE-2026-43567: OpenClaw: screen_record outPath bypassed workspace-only filesystem guard

April 17, 2026 (updated May 5, 2026)

screen_record outPath bypassed workspace-only filesystem guard.

References

github.com/advisories/GHSA-jf25-7968-h2h5
github.com/openclaw/openclaw/commit/635bb35b68d8faa5bfa2fda35feadd315122748a
github.com/openclaw/openclaw/pull/63551
github.com/openclaw/openclaw/security/advisories/GHSA-jf25-7968-h2h5
nvd.nist.gov/vuln/detail/CVE-2026-43567

Code Behaviors & Features

Detect and mitigate CVE-2026-43567 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →