CVE-2026-100592

OpenClaw is an agent gateway distributed via npm. In versions >= 2026.4.10 and < 2026.7.1, persistent memory dreaming mutations omit owner permission checks. An authorized but non-owner external-channel sender can issue the persistent '/dreaming on' and '/dreaming off' commands to enable or disable the Gateway's Memory Core dreaming behavior, disabling background memory processing or re-enabling durable memory promotion where the owner expected it to remain disabled; the practical confidentiality, integrity, and availability impact depends on stored conversation material and subsequent memory use. Read-only status and help commands remain governed by normal command policy. The issue is fixed in version 2026.7.1. As a workaround, disable dreaming commands in external channels or restrict channel command access to owners.

• CWE-862

• https://github.com/openclaw/openclaw/security/advisories/GHSA-22v4-33m3-8p7m
• https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-memory-dreaming

Published

Sep 26, 2026

Last Modified

Sep 26, 2026

Status

Received

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-100587OpenClaw versions before 2026.7.1 fail to properly validate …8.8
• CVE-2026-100588OpenClaw (npm package 'openclaw') before 2026.7.1 does not e…8.3
• CVE-2026-100589OpenClaw versions before 2026.7.1 contain a sandbox bypass v…8.3
• CVE-2026-10059A flaw was found in the Multicluster Engine for Kubernetes C…9.1
• CVE-2026-100590OpenClaw before 2026.7.1 contains an authorization bypass vu…4.3
• CVE-2026-100591OpenClaw is an npm-distributed agent gateway. In versions be…6.3
• CVE-2026-100593OpenClaw (npm package `openclaw`) before 2026.7.1 does not e…5.4
• CVE-2026-100594OpenClaw versions before 2026.7.1 contain an authorization b…6.5
• CVE-2026-100595OpenClaw versions before 2026.7.1 contain an authorization b…6.5
• CVE-2026-100596OpenClaw versions before 2026.7.1 fail to properly authorize…8.8
• CVE-2026-100597OpenClaw (npm package 'openclaw') before 2026.7.1 is vulnera…7.8
• CVE-2026-100598OpenClaw (npm package openclaw) before 2026.7.1 incorrectly …7.1