CVE-2026-100539

OpenClaw npm package 'openclaw' before 2026.8.1 fails to revoke memory tool access when an operator hot-disables memory configuration. Existing memorysearch and memoryget tool instances retain the enabled configuration captured at creation time because the execution-time resolver treats explicit...

CVE-2026-100539

The OpenClaw (npm package 'openclaw ') before version 2026.8.1 contains a memory access control bypass. The vulnerability occurs because the execution-time resolver treats explicit disablement of memory configurations as an unavailable snapshot, causing the memory_search and memory_get tool insta...

CVE-2026-100539 OpenClaw before 2026.8.1 Memory Access Control Bypass

OpenClaw npm package 'openclaw' before 2026.8.1 fails to revoke memory tool access when an operator hot-disables memory configuration. Existing memorysearch and memoryget tool instances retain the enabled configuration captured at creation time because the execution-time resolver treats explicit...

PT-2026-99176

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.8.1 Description The software fails to revoke memory tool access when an operator hot-disables memory configuration. This occurs because the execution-time resolver treats explicit disablement as an unavailable...