Anshumanbh

**Name of the Vulnerable Software and Affected Versions** OpenClaw versions prior to 2026.6.5 **Description** An authorization bypass exists in node exec approvals. This issue allows lower-trust callers to execute actions beyond their intended authorization by leveraging mismatched configurations between gateway and node environments. Attackers can exploit these discrepancies to persist or perform actions that exceed the approved permissions of the caller. **Recommendations** Update to version 2026.6.5.

**Name of the Vulnerable Software and Affected Versions** OpenClaw versions prior to 2026.4.10 **Description** A path traversal issue exists in the screen record tool where the `outPath` parameter bypasses workspace-only filesystem guards. This allows an authorized tool call to write files to unintended locations on the system by specifying a path outside the intended workspace boundary. **Recommendations** Update to version 2026.4.10 or newer.