CVE-2026-100552 OpenClaw before 2026.8.1 Policy Bypass via Native Tools

OpenClaw npm package 'openclaw' before 2026.8.1 does not correctly enforce per-chat tool policies for Codex app-server runtime tools. A conversation-level tools.allow rule filtered OpenClaw tools but did not restrict the shell, process, file, and patch tools owned by the Codex runtime. When a...

CVE-2026-100552

OpenClaw npm package 'openclaw' before 2026.8.1 does not correctly enforce per-chat tool policies for Codex app-server runtime tools. A conversation-level tools.allow rule filtered OpenClaw tools but did not restrict the shell, process, file, and patch tools owned by the Codex runtime. When a...

CVE-2026-100552 OpenClaw before 2026.8.1 Policy Bypass via Native Tools

OpenClaw npm package 'openclaw' before 2026.8.1 does not correctly enforce per-chat tool policies for Codex app-server runtime tools. A conversation-level tools.allow rule filtered OpenClaw tools but did not restrict the shell, process, file, and patch tools owned by the Codex runtime. When a...

EUVD-2026-87498

OpenClaw npm package 'openclaw' before 2026.8.1 does not correctly enforce per-chat tool policies for Codex app-server runtime tools. A conversation-level tools.allow rule filtered OpenClaw tools but did not restrict the shell, process, file, and patch tools owned by the Codex runtime. When a...

CVE-2026-100545 OpenClaw before 2026.8.1 Policy Bypass via Session Filename Generation

OpenClaw npm package openclaw before 2026.8.1 incorrectly enforces sender tool policies during session-memory filename generation. In affected versions, filename generation created an embedded helper that retained tools which the originating sender's policy had removed. When session-memory filena...

CVE-2026-100545 OpenClaw before 2026.8.1 Policy Bypass via Session Filename Generation

OpenClaw npm package openclaw before 2026.8.1 incorrectly enforces sender tool policies during session-memory filename generation. In affected versions, filename generation created an embedded helper that retained tools which the originating sender's policy had removed. When session-memory filena...

CVE-2026-100545

OpenClaw npm package "openclaw" before 2026.8.1 incorrectly enforces sender tool policies during session-memory filename generation. In affected versions, filename generation created an embedded helper that retained tools which the originating sender's policy had removed. When session-memory...

EUVD-2026-87505

OpenClaw npm package openclaw before 2026.8.1 incorrectly enforces sender tool policies during session-memory filename generation. In affected versions, filename generation created an embedded helper that retained tools which the originating sender's policy had removed. When session-memory filena...

CVE-2026-100545

The OpenClaw (npm package openclaw) before version 2026.8.1 contains a vulnerability where it incorrectly enforces sender tool policies during session-memory filename generation . In affected versions, the generation process creates an embedded helper that retains tools even if the originating se...

CVE-2026-100545 OpenClaw before 2026.8.1 Policy Bypass via Session Filename Generation

OpenClaw npm package openclaw before 2026.8.1 incorrectly enforces sender tool policies during session-memory filename generation. In affected versions, filename generation created an embedded helper that retained tools which the originating sender's policy had removed. When session-memory filena...

CVE-2026-100544 openclaw voice-call before 2026.8.1 Authorization Bypass

openclaw's @openclaw/voice-call package before 2026.8.1 launches the configured agent for classic inbound voice calls without propagating the caller's identity or non-owner status. As a result, owner-only tool filtering can fail open and expose the agent's normal tool authority to a remote caller...

EUVD-2026-87512

OpenClaw npm package 'openclaw' before 2026.8.1 does not apply the originating sender's global or per-agent toolsBySender policy when handling outbound attachments. A sender that has been explicitly denied filesystem read tools can still cause a known local file to be read and returned via a...

CVE-2026-100538 OpenClaw before 2026.8.1 Local File Read via Outbound Attachments

OpenClaw npm package 'openclaw' before 2026.8.1 does not apply the originating sender's global or per-agent toolsBySender policy when handling outbound attachments. A sender that has been explicitly denied filesystem read tools can still cause a known local file to be read and returned via a...

CVE-2026-100538 OpenClaw before 2026.8.1 Local File Read via Outbound Attachments

OpenClaw npm package 'openclaw' before 2026.8.1 does not apply the originating sender's global or per-agent toolsBySender policy when handling outbound attachments. A sender that has been explicitly denied filesystem read tools can still cause a known local file to be read and returned via a...

CVE-2026-100538

The OpenClaw npm package (openclaw ) versions before 2026.8.1 is vulnerable to a local file read due to a failure to apply the sender's toolsBySender policy when processing outbound attachments. An attacker who is explicitly denied filesystem read tools can still trigger a read of a known local f...

CVE-2026-100538

OpenClaw npm package 'openclaw' before 2026.8.1 does not apply the originating sender's global or per-agent toolsBySender policy when handling outbound attachments. A sender that has been explicitly denied filesystem read tools can still cause a known local file to be read and returned via a...

CVE-2026-100538 OpenClaw before 2026.8.1 Local File Read via Outbound Attachments

OpenClaw npm package 'openclaw' before 2026.8.1 does not apply the originating sender's global or per-agent toolsBySender policy when handling outbound attachments. A sender that has been explicitly denied filesystem read tools can still cause a known local file to be read and returned via a...

CVE-2026-100537 OpenClaw before 2026.8.1 Authentication Bypass via Active Memory

OpenClaw npm package 'openclaw' before 2026.8.1 fails to apply the originating requester's effective tool policy during Active Memory automatic recall. In deployments that use Active Memory together with requester-specific tool rules, deterministic and hidden recall paths can retrieve durable...

CVE-2026-100537 OpenClaw before 2026.8.1 Authentication Bypass via Active Memory

OpenClaw npm package 'openclaw' before 2026.8.1 fails to apply the originating requester's effective tool policy during Active Memory automatic recall. In deployments that use Active Memory together with requester-specific tool rules, deterministic and hidden recall paths can retrieve durable...

CVE-2026-100537

The OpenClaw (npm package 'openclaw' ) before version 2026.8.1 contains a vulnerability where it fails to apply a requester's effective tool policy during Active Memory automatic recall . In environments using Active Memory with requester-specific rules, hidden recall paths can retrieve durable m...