CVE-2026-100593

The OpenClaw npm package (openclaw) versions prior to 2026.7.1 fail to enforce an owner-only requirement for persistent /activation policy changes in group channels. This allows an authorized non-owner channel sender to modify whether the agent requires mention-based activation. Consequently, the...

CVE-2026-100592

The OpenClaw agent gateway (distributed via npm) versions >= 2026.4.10 and

@0xwork/connect (>=0.1.8, <=0.1.9), @chrysb/alphaclaw (>=0.8.7, <=0.9.29) +12 more potentially affected by CVE-2026-100592 via openclaw (>=2026.4.5, <=2026.7.1-2)

openclaw NPM version =2026.4.5, =0.1.8, =0.8.7, =2.2.4, =4.0.0, =0.2.5, =1.1.50, =2.1.8, =0.1.0, =0.0.1-release20260506, =0.1.38, =1.0.0, =1.3.1 Source cves: CVE-2026-100592 Source advisory: MEND:CVE-2026-100592...

@0xwork/connect (>=0.1.8, <=0.1.9), @chrysb/alphaclaw (>=0.8.7, <=0.9.29) +13 more potentially affected by CVE-2026-100593 via openclaw (>=0.0.1, <=2026.7.1-2)

openclaw NPM version =0.0.1, =0.1.8, =0.8.7, =2.2.4, =4.0.0, =0.2.5, =1.1.50, =2.1.8, =0.1.0, =0.0.1-release20260506, =0.1.38, =1.0.0, =3.3.2, =3.3.7 Source cves: CVE-2026-100593 Source advisory: MEND:CVE-2026-100593...

EUVD-2026-87459

OpenClaw is an agent gateway distributed via npm. In versions = 2026.4.10 and 2026.7.1, persistent memory dreaming mutations omit owner permission checks. An authorized but non-owner external-channel sender can issue the persistent '/dreaming on' and '/dreaming off' commands to enable or disable...

CVE-2026-100593 OpenClaw before 2026.7.1 Authentication Bypass via activation

OpenClaw npm package openclaw before 2026.7.1 does not enforce the documented owner-only requirement for persistent /activation policy changes in group channels. An authorized non-owner channel sender can change whether the agent requires mention-based activation, causing the agent to respond mor...

EUVD-2026-87458

OpenClaw npm package openclaw before 2026.7.1 does not enforce the documented owner-only requirement for persistent /activation policy changes in group channels. An authorized non-owner channel sender can change whether the agent requires mention-based activation, causing the agent to respond mor...

CVE-2026-100592 OpenClaw before 2026.7.1 Authentication Bypass via Memory Dreaming

OpenClaw is an agent gateway distributed via npm. In versions = 2026.4.10 and 2026.7.1, persistent memory dreaming mutations omit owner permission checks. An authorized but non-owner external-channel sender can issue the persistent '/dreaming on' and '/dreaming off' commands to enable or disable...

CVE-2026-100591 OpenClaw before 2026.7.1 Authentication Bypass via Active Memory

OpenClaw is an npm-distributed agent gateway. In versions before 2026.7.1, the global Active Memory toggle mutations could omit owner checks. An authorized non-owner external-channel sender could therefore persistently enable or disable Active Memory for the Gateway, disabling memory recall for...

CVE-2026-100591 OpenClaw before 2026.7.1 Authentication Bypass via Active Memory

OpenClaw is an npm-distributed agent gateway. In versions before 2026.7.1, the global Active Memory toggle mutations could omit owner checks. An authorized non-owner external-channel sender could therefore persistently enable or disable Active Memory for the Gateway, disabling memory recall for...

CVE-2026-100591

The OpenClaw agent gateway (npm-distributed) is vulnerable in versions prior to 2026.7.1 due to missing owner authorization checks on Active Memory global toggle mutations. An authorized non-owner external-channel sender can persistently enable or disable Active Memory for the Gateway. This allow...

CVE-2026-100591

OpenClaw is an npm-distributed agent gateway. In versions before 2026.7.1, the global Active Memory toggle mutations could omit owner checks. An authorized non-owner external-channel sender could therefore persistently enable or disable Active Memory for the Gateway, disabling memory recall for...

@0xwork/connect (>=0.1.8, <=0.1.9), @chrysb/alphaclaw (>=0.8.7, <=0.9.29) +13 more potentially affected by CVE-2026-100591 via openclaw (>=0.0.1, <=2026.7.1-2)

openclaw NPM version =0.0.1, =0.1.8, =0.8.7, =2.2.4, =4.0.0, =0.2.5, =1.1.50, =2.1.8, =0.1.0, =0.0.1-release20260506, =0.1.38, =1.0.0, =3.3.2, =3.3.7 Source cves: CVE-2026-100591 Source advisory: MEND:CVE-2026-100591...

CVE-2026-100591 OpenClaw before 2026.7.1 Authentication Bypass via Active Memory

OpenClaw is an npm-distributed agent gateway. In versions before 2026.7.1, the global Active Memory toggle mutations could omit owner checks. An authorized non-owner external-channel sender could therefore persistently enable or disable Active Memory for the Gateway, disabling memory recall for...

EUVD-2026-87460

OpenClaw is an npm-distributed agent gateway. In versions before 2026.7.1, the global Active Memory toggle mutations could omit owner checks. An authorized non-owner external-channel sender could therefore persistently enable or disable Active Memory for the Gateway, disabling memory recall for...

CVE-2026-100590 OpenClaw before 2026.7.1 Authorization Bypass via voice set

OpenClaw before 2026.7.1 contains an authorization bypass vulnerability in the /voice set command that allows non-owner external-channel senders to persist Gateway voice configuration. Attackers with command access can change the voice used by Talk responses for the configured provider, affecting...

CVE-2026-100589 OpenClaw before 2026.7.1 Sandbox Bypass via Browser Node

OpenClaw versions before 2026.7.1 contain a sandbox bypass vulnerability in the browser tool that allows sandboxed sessions to access paired node browser actions despite allowHostControl=false configuration. Attackers with control over sandboxed agent input can select a paired node and perform ho...

CVE-2026-100589 OpenClaw before 2026.7.1 Sandbox Bypass via Browser Node

OpenClaw versions before 2026.7.1 contain a sandbox bypass vulnerability in the browser tool that allows sandboxed sessions to access paired node browser actions despite allowHostControl=false configuration. Attackers with control over sandboxed agent input can select a paired node and perform ho...

CVE-2026-100589

OpenClaw versions before 2026.7.1 are vulnerable to a sandbox bypass in the browser tool. Despite an allowHostControl=false configuration, sandboxed sessions can access paired node browser actions. Attackers who control sandboxed agent input can select a paired node to perform host browser operat...

CVE-2026-100590

Versions of OpenClaw before 2026.7.1 are vulnerable to an authorization bypass in the /voice set command. This flaw allows non-owner external-channel senders to persist Gateway voice configuration . An attacker with command access can modify the voice used for Talk responses from a configured pro...