CVE-2026-100539

OpenClaw npm package 'openclaw' before 2026.8.1 fails to revoke memory tool access when an operator hot-disables memory configuration. Existing memorysearch and memoryget tool instances retain the enabled configuration captured at creation time because the execution-time resolver treats explicit...

EUVD-2026-87511

OpenClaw npm package 'openclaw' before 2026.8.1 fails to revoke memory tool access when an operator hot-disables memory configuration. Existing memorysearch and memoryget tool instances retain the enabled configuration captured at creation time because the execution-time resolver treats explicit...

CVE-2026-100539

The OpenClaw (npm package 'openclaw ') before version 2026.8.1 contains a memory access control bypass. The vulnerability occurs because the execution-time resolver treats explicit disablement of memory configurations as an unavailable snapshot, causing the memory_search and memory_get tool insta...

CVE-2026-100539 OpenClaw before 2026.8.1 Memory Access Control Bypass

OpenClaw npm package 'openclaw' before 2026.8.1 fails to revoke memory tool access when an operator hot-disables memory configuration. Existing memorysearch and memoryget tool instances retain the enabled configuration captured at creation time because the execution-time resolver treats explicit...

CVE-2026-100537

The OpenClaw (npm package 'openclaw' ) before version 2026.8.1 contains a vulnerability where it fails to apply a requester's effective tool policy during Active Memory automatic recall . In environments using Active Memory with requester-specific rules, hidden recall paths can retrieve durable m...

CVE-2026-100537 OpenClaw before 2026.8.1 Authentication Bypass via Active Memory

OpenClaw npm package 'openclaw' before 2026.8.1 fails to apply the originating requester's effective tool policy during Active Memory automatic recall. In deployments that use Active Memory together with requester-specific tool rules, deterministic and hidden recall paths can retrieve durable...

CVE-2026-44111 OpenClaw < 2026.4.15 - Arbitrary Markdown File Read via QMD memory_get

OpenClaw before 2026.4.15 contains an arbitrary file read vulnerability in the QMD backend memoryget function that allows callers to read any Markdown files within the workspace root. Attackers with access to the memory tool can bypass path restrictions by providing arbitrary workspace Markdown...

CVE-2026-44111

OpenClaw prior to 2026.4.15 is affected by an arbitrary file read in the QMD backend memory_get function. The flaw allows callers with access to the memory tool to bypass path restrictions and read any Markdown files within the workspace root, including files outside canonical memory locations or...

CVE-2026-44111: Permissive List of Allowed Inputs

OpenClaw before 2026.4.15 contains an arbitrary file read vulnerability in the QMD backend memoryget function that allows callers to read any Markdown files within the workspace root. Attackers with access to the memory tool can bypass path restrictions by providing arbitrary workspace Markdown...