CVE-2026-100545 OpenClaw before 2026.8.1 Policy Bypass via Session Filename Generation

OpenClaw npm package openclaw before 2026.8.1 incorrectly enforces sender tool policies during session-memory filename generation. In affected versions, filename generation created an embedded helper that retained tools which the originating sender's policy had removed. When session-memory filena...

CVE-2026-100545 OpenClaw before 2026.8.1 Policy Bypass via Session Filename Generation

OpenClaw npm package openclaw before 2026.8.1 incorrectly enforces sender tool policies during session-memory filename generation. In affected versions, filename generation created an embedded helper that retained tools which the originating sender's policy had removed. When session-memory filena...

EUVD-2026-87505

OpenClaw npm package openclaw before 2026.8.1 incorrectly enforces sender tool policies during session-memory filename generation. In affected versions, filename generation created an embedded helper that retained tools which the originating sender's policy had removed. When session-memory filena...

CVE-2026-100545

OpenClaw npm package "openclaw" before 2026.8.1 incorrectly enforces sender tool policies during session-memory filename generation. In affected versions, filename generation created an embedded helper that retained tools which the originating sender's policy had removed. When session-memory...

CVE-2026-100545

The OpenClaw (npm package openclaw) before version 2026.8.1 contains a vulnerability where it incorrectly enforces sender tool policies during session-memory filename generation . In affected versions, the generation process creates an embedded helper that retains tools even if the originating se...

CVE-2026-100545 OpenClaw before 2026.8.1 Policy Bypass via Session Filename Generation

OpenClaw npm package openclaw before 2026.8.1 incorrectly enforces sender tool policies during session-memory filename generation. In affected versions, filename generation created an embedded helper that retained tools which the originating sender's policy had removed. When session-memory filena...

CVE-2026-100535 OpenClaw before 2026.8.1 Privilege Escalation via Session Memory

OpenClaw npm package 'openclaw' versions = 2026.4.5 and 2026.8.1 can lose the originating requester's restrictions and untrusted provenance when session-derived text is persisted to session memory. In deployments where session-memory capture and dreaming are enabled, a restricted external sender...

CVE-2026-100535

The OpenClaw npm package (versions >= 2026.4.5 and

CVE-2026-100535

OpenClaw npm package 'openclaw' versions = 2026.4.5 and 2026.8.1 can lose the originating requester's restrictions and untrusted provenance when session-derived text is persisted to session memory. In deployments where session-memory capture and dreaming are enabled, a restricted external sender...

EUVD-2026-87515

OpenClaw npm package 'openclaw' versions = 2026.4.5 and 2026.8.1 can lose the originating requester's restrictions and untrusted provenance when session-derived text is persisted to session memory. In deployments where session-memory capture and dreaming are enabled, a restricted external sender...

CVE-2026-100535 OpenClaw before 2026.8.1 Privilege Escalation via Session Memory

OpenClaw npm package 'openclaw' versions = 2026.4.5 and 2026.8.1 can lose the originating requester's restrictions and untrusted provenance when session-derived text is persisted to session memory. In deployments where session-memory capture and dreaming are enabled, a restricted external sender...

CVE-2026-100535 OpenClaw before 2026.8.1 Privilege Escalation via Session Memory

OpenClaw npm package 'openclaw' versions = 2026.4.5 and 2026.8.1 can lose the originating requester's restrictions and untrusted provenance when session-derived text is persisted to session memory. In deployments where session-memory capture and dreaming are enabled, a restricted external sender...

CVE-2026-100534 OpenClaw before 2026.8.1 Session Cancellation Authorization Bypass

OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability in webhook TaskFlow cancellation that allows attackers to cancel unrelated sessions. An attacker with a webhook route secret can supply an arbitrary child session key to cancel ACP or subagent work outside the route's...

CVE-2026-100534 OpenClaw before 2026.8.1 Session Cancellation Authorization Bypass

OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability in webhook TaskFlow cancellation that allows attackers to cancel unrelated sessions. An attacker with a webhook route secret can supply an arbitrary child session key to cancel ACP or subagent work outside the route's...

CVE-2026-100534 OpenClaw before 2026.8.1 Session Cancellation Authorization Bypass

OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability in webhook TaskFlow cancellation that allows attackers to cancel unrelated sessions. An attacker with a webhook route secret can supply an arbitrary child session key to cancel ACP or subagent work outside the route's...

EUVD-2026-87516

OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability in webhook TaskFlow cancellation that allows attackers to cancel unrelated sessions. An attacker with a webhook route secret can supply an arbitrary child session key to cancel ACP or subagent work outside the route's...

CVE-2026-100534

Versions of OpenClaw prior to 2026.8.1 are affected by an authorization bypass vulnerability within the webhook TaskFlow cancellation mechanism. An attacker possessing a webhook route secret can provide an arbitrary child session key to cancel ACP or subagent work that falls outside the route's c...

CVE-2026-100528 OpenClaw before 2026.8.1 Credential Disclosure via Provider Endpoint

OpenClaw npm package 'openclaw' before 2026.8.1 could send third-party provider credentials to the wrong endpoint. In affected versions, when a third-party provider uses an OpenAI-compatible API and the resolved model metadata lacks a concrete base URL, a pinned session that continues after a mod...

EUVD-2026-87368

Flame through 2.4.0 contains an insufficient session expiration vulnerability in the login endpoint that allows attackers with former admin access to obtain tokens with arbitrary lifespans by supplying unvalidated duration parameters. Attackers can mint near-permanent administrator tokens that...

PT-2026-99348

Name of the Vulnerable Software and Affected Versions stoatchat versions prior to 0.15.5 Description An account enumeration issue exists in the login endpoint. Unauthenticated attackers can identify whether an email address is registered by analyzing the error location fields returned in the...