CVE-2026-100537
Received Received - Intake

Active Memory Data Leak in OpenClaw npm Package

Publication date: 2026-09-26

Last updated on: 2026-09-26

Assigner: VulnCheck

Description
OpenClaw (npm package 'openclaw') before 2026.8.1 fails to apply the originating requester's effective tool policy during Active Memory automatic recall. In deployments that use Active Memory together with requester-specific tool rules, deterministic and hidden recall paths can retrieve durable memory and inject it into the agent's context even when toolsBySender explicitly denies that requester access to the memory tools (memory_search, memory_get). As a result, an admitted but denied sender can receive information derived from durable memory in the agent's response without directly invoking any memory tool. The issue is fixed in 2026.8.1.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-26
Last Modified
2026-09-26
Generated
2026-09-26
AI Q&A
2026-09-26
EPSS Evaluated
N/A
NVD
CVE-2026-100537
EUVD
EUVD-2026-87513

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

OpenClaw before version 2026.8.1 fails to enforce requester-specific tool policies during Active Memory recall. In deployments using Active Memory with requester-based tool restrictions, unauthorized recall paths can retrieve durable memory and inject it into the agent's context even when toolsBySender explicitly denies access to memory tools like memory_search and memory_get. This allows an admitted but denied sender to receive information derived from durable memory without directly invoking any memory tool.

Detection Guidance

To detect this vulnerability, check the version of the openclaw npm package in your environment. If it is before 2026.8.1, the system is vulnerable. Run: npm list openclaw or npm view openclaw version to verify the installed version.

Impact Analysis

An attacker with limited privileges could bypass access controls and retrieve sensitive memory-derived information they are not authorized to access. This could lead to unauthorized data exposure or information leakage in systems using Active Memory with requester-specific tool rules.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive memory-derived information, potentially violating data protection requirements under GDPR and HIPAA. If durable memory contains personal or health data, the flaw may enable unauthorized disclosure to denied requesters, breaching confidentiality and compliance obligations.

Mitigation Strategies

Immediately upgrade the openclaw package to version 2026.8.1 or later. If upgrading is not possible, disable Active Memory for conversations with denied requesters or isolate those conversations in a separate agent and workspace without sensitive durable memory.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-100537. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart