6 matches found
Insertion of Sensitive Information into Log File
Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File via the memory embedding failover logic, where the primary embedding provider's configured API key is reused when a request is redirected ...
CVE-2026-100548
OpenClaw npm package 'openclaw' versions = 2026.3.28 and 2026.8.1 contain a credential exposure issue in memory embedding failover. When remote embedding fallback is configured and the primary embedding provider fails, the request can be sent to a different fallback provider while still reusing t...
CVE-2026-100548
The OpenClaw npm package (openclaw ) versions >= 2026.3.28 and
EUVD-2026-87502
OpenClaw npm package 'openclaw' versions = 2026.3.28 and 2026.8.1 contain a credential exposure issue in memory embedding failover. When remote embedding fallback is configured and the primary embedding provider fails, the request can be sent to a different fallback provider while still reusing t...
CVE-2026-100548 OpenClaw before 2026.8.1 Credential Exposure via Embedding Fallback
OpenClaw npm package 'openclaw' versions = 2026.3.28 and 2026.8.1 contain a credential exposure issue in memory embedding failover. When remote embedding fallback is configured and the primary embedding provider fails, the request can be sent to a different fallback provider while still reusing t...