7.1

CVSS Score

4.0

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-43567

CVE-2026-43567: OpenClaw < 2026.4.10 - Path Traversal in screen_record outPath Parameter

OpenClaw before 2026.4.10 contains a path traversal vulnerability in the screen_record tool's outPath parameter that bypasses workspace-only filesystem guards. Attackers can exploit this by specifying an outPath outside the workspace boundary to write files to unintended locations on the system.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-43567

CVE-2026-43567:

7.1

CVSS Score

4.0

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	< 2026.4.10	2026.4.10

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability is a path traversal issue in the openclaw agent's screen_record tool, allowing an authorized user to write files outside the intended workspace by providing a malicious outPath. The root cause was a failure to properly apply security guards to the tool's input parameters.

The analysis of the patch commit 635bb35b68d8faa5bfa2fda35feadd315122748a reveals two key areas of failure:

Configuration Failure in createOpenClawTools: The createOpenClawTools function in src/agents/openclaw-tools.ts was responsible for creating the agent's tools. Critically, it instantiated the nodes tool (which provides the screen_record action) but failed to wrap it with a security guard that would validate the outPath parameter against the workspace boundary. The patch corrects this by conditionally wrapping the nodesTool with wrapToolWorkspaceRootGuardWithOptions and explicitly telling it to guard the outPath parameter.
Insufficient Guard Logic in wrapToolWorkspaceRootGuardWithOptions: The utility function wrapToolWorkspaceRootGuardWithOptions in src/agents/pi-tools.read.ts was insufficiently generic. Its previous implementation did not support checking arbitrary parameter names and likely defaulted to only checking for a parameter named path. This made it ineffective for tools like screen_record that used a different parameter name (outPath) for file paths. The patch refactors this function to accept a pathParamKeys option, allowing it to be configured to validate any given path parameter, thus making the security control more robust and reusable.

Exploitation would involve a call to the execute method of the nodes tool. The vulnerability lies in the fact that this call was not intercepted by a security guard to validate the outPath. The identified functions are the points in the code where this necessary security control was either missing or inadequately implemented.

Vulnerable functions

createOpenClawTools

src/agents/openclaw-tools.ts

This function is responsible for assembling and configuring the agent's tools. Before the patch, it created the `nodes` tool (which includes the `screen_record` functionality) and added it to the toolset without applying a necessary security guard to the `outPath` parameter. This omission is the root cause of the vulnerability, as it failed to enforce the workspace boundary for file paths supplied to the tool.

wrapToolWorkspaceRootGuardWithOptions

src/agents/pi-tools.read.ts

This function is a higher-order function that wraps a tool to add a security guard for file paths. The vulnerability existed because the previous implementation was not generic enough; it likely only checked for a parameter named `path`. It could not be configured to check other parameters, such as `outPath`. The patch modifies this function to accept a `pathParamKeys` array, making it possible to guard any specified path parameter. The `execute` method within the object returned by this function contained the flawed (or missing) validation logic for `outPath`.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.