A vulnerability in the OpenClaw npm package prior to version 2026.4.10 allowed the screen_record tool's outPath parameter to bypass the workspace-only filesystem guard. This permitted an authorized tool call to write files outside the intended workspace boundary. The issue was fixed in version 2026.4.10 and later releases.