12 matches found
CVE-2026-100539
OpenClaw npm package 'openclaw' before 2026.8.1 fails to revoke memory tool access when an operator hot-disables memory configuration. Existing memorysearch and memoryget tool instances retain the enabled configuration captured at creation time because the execution-time resolver treats explicit...
EUVD-2026-87511
OpenClaw npm package 'openclaw' before 2026.8.1 fails to revoke memory tool access when an operator hot-disables memory configuration. Existing memorysearch and memoryget tool instances retain the enabled configuration captured at creation time because the execution-time resolver treats explicit...
CVE-2026-100539 OpenClaw before 2026.8.1 Memory Access Control Bypass
OpenClaw npm package 'openclaw' before 2026.8.1 fails to revoke memory tool access when an operator hot-disables memory configuration. Existing memorysearch and memoryget tool instances retain the enabled configuration captured at creation time because the execution-time resolver treats explicit...
CVE-2026-100539 OpenClaw before 2026.8.1 Memory Access Control Bypass
OpenClaw npm package 'openclaw' before 2026.8.1 fails to revoke memory tool access when an operator hot-disables memory configuration. Existing memorysearch and memoryget tool instances retain the enabled configuration captured at creation time because the execution-time resolver treats explicit...
CVE-2026-100539 OpenClaw before 2026.8.1 Memory Access Control Bypass
OpenClaw npm package 'openclaw' before 2026.8.1 fails to revoke memory tool access when an operator hot-disables memory configuration. Existing memorysearch and memoryget tool instances retain the enabled configuration captured at creation time because the execution-time resolver treats explicit...
CVE-2026-100539
OpenClaw npm package 'openclaw' before 2026.8.1 fails to revoke memory tool access when an operator hot-disables memory configuration. Existing memorysearch and memoryget tool instances retain the enabled configuration captured at creation time because the execution-time resolver treats explicit...
CVE-2026-100539
The OpenClaw (npm package 'openclaw ') before version 2026.8.1 contains a memory access control bypass. The vulnerability occurs because the execution-time resolver treats explicit disablement of memory configurations as an unavailable snapshot, causing the memory_search and memory_get tool insta...
CVE-2026-100537
OpenClaw npm package 'openclaw' before 2026.8.1 fails to apply the originating requester's effective tool policy during Active Memory automatic recall. In deployments that use Active Memory together with requester-specific tool rules, deterministic and hidden recall paths can retrieve durable...
CVE-2026-100537
The OpenClaw (npm package 'openclaw' ) before version 2026.8.1 contains a vulnerability where it fails to apply a requester's effective tool policy during Active Memory automatic recall . In environments using Active Memory with requester-specific rules, hidden recall paths can retrieve durable m...
CVE-2026-100537 OpenClaw before 2026.8.1 Authentication Bypass via Active Memory
OpenClaw npm package 'openclaw' before 2026.8.1 fails to apply the originating requester's effective tool policy during Active Memory automatic recall. In deployments that use Active Memory together with requester-specific tool rules, deterministic and hidden recall paths can retrieve durable...
CVE-2026-100537 OpenClaw before 2026.8.1 Authentication Bypass via Active Memory
OpenClaw npm package 'openclaw' before 2026.8.1 fails to apply the originating requester's effective tool policy during Active Memory automatic recall. In deployments that use Active Memory together with requester-specific tool rules, deterministic and hidden recall paths can retrieve durable...
CVE-2026-100539: Incorrect Authorization
OpenClaw npm package 'openclaw' before 2026.8.1 fails to revoke memory tool access when an operator hot-disables memory configuration. Existing memorysearch and memoryget tool instances retain the enabled configuration captured at creation time because the execution-time resolver treats explicit...