CVE-2026-100591

OpenClaw is an npm-distributed agent gateway. In versions before 2026.7.1, the global Active Memory toggle mutations could omit owner checks. An authorized non-owner external-channel sender could therefore persistently enable or disable Active Memory for the Gateway, disabling memory recall for future sessions or re-enabling global recall where the owner expected it to remain disabled. The issue is limited to persistent global on/off mutations; session-level controls and read-only status remain governed by existing command policy. The issue is fixed in version 2026.7.1. (Suggested title: "OpenClaw before 2026.7.1 missing owner authorization check on Active Memory global toggles".)

• CWE-862

• https://github.com/openclaw/openclaw/security/advisories/GHSA-xw9g-7xvv-gcjc
• https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-active-memory

Published

Sep 26, 2026

Last Modified

Sep 26, 2026

Status

Received

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-100586OpenClaw Codex before 2026.7.1 fails to properly enforce own…8.8
• CVE-2026-100587OpenClaw versions before 2026.7.1 fail to properly validate …8.8
• CVE-2026-100588OpenClaw (npm package 'openclaw') before 2026.7.1 does not e…8.3
• CVE-2026-100589OpenClaw versions before 2026.7.1 contain a sandbox bypass v…8.3
• CVE-2026-10059A flaw was found in the Multicluster Engine for Kubernetes C…9.1
• CVE-2026-100590OpenClaw before 2026.7.1 contains an authorization bypass vu…4.3
• CVE-2026-100592OpenClaw is an agent gateway distributed via npm. In version…6.3
• CVE-2026-100593OpenClaw (npm package `openclaw`) before 2026.7.1 does not e…5.4
• CVE-2026-100594OpenClaw versions before 2026.7.1 contain an authorization b…6.5
• CVE-2026-100595OpenClaw versions before 2026.7.1 contain an authorization b…6.5
• CVE-2026-100596OpenClaw versions before 2026.7.1 fail to properly authorize…8.8
• CVE-2026-100597OpenClaw (npm package 'openclaw') before 2026.7.1 is vulnera…7.8