CVE-2026-100539
Received Received - Intake

Memory Access Bypass in OpenClaw npm Package

Publication date: 2026-09-26

Last updated on: 2026-09-26

Assigner: VulnCheck

Description
OpenClaw (npm package 'openclaw') before 2026.8.1 fails to revoke memory tool access when an operator hot-disables memory configuration. Existing memory_search and memory_get tool instances retain the enabled configuration captured at creation time because the execution-time resolver treats explicit disablement like an unavailable configuration snapshot and restores the stale authority. As a result, during an already-running agent turn the model can continue searching and reading durable memory after the operator revoked that access, for the remainder of that run. Exploitation requires memory to be disabled while a previously created memory tool remains active. The issue is fixed in 2026.8.1.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-26
Last Modified
2026-09-26
Generated
2026-09-26
AI Q&A
2026-09-26
EPSS Evaluated
N/A
NVD
CVE-2026-100539
EUVD
EUVD-2026-87511

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-863 The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

The vulnerability in the OpenClaw npm package before version 2026.8.1 allows memory tools to retain access to memory even after an operator disables it. When memory configuration is disabled while a memory tool instance is active, the tool continues using the previously enabled configuration due to improper handling by the execution-time resolver. This results in the model being able to search or read durable memory for the remainder of the active agent run.

Detection Guidance

Detecting this vulnerability requires checking the version of the openclaw npm package. Run 'npm list openclaw' to verify if the installed version is below 2026.8.1. If it is, the system is vulnerable.

Impact Analysis

This vulnerability could allow unauthorized access to sensitive memory data during an active agent session. If an operator disables memory access but a memory tool remains active, the model might continue reading or searching memory for the rest of that session. Users should upgrade to version 2026.8.1 or restart active agent runs after disabling memory to mitigate this risk.

Compliance Impact

This vulnerability could potentially affect compliance with GDPR and HIPAA by allowing unauthorized access to memory containing sensitive data. If memory tools retain access after revocation, it may lead to unauthorized data exposure or processing, violating principles of data minimization, integrity, and confidentiality required by these regulations.

Mitigation Strategies

Upgrade the openclaw package to version 2026.8.1 or later using 'npm install openclaw@latest'. If immediate revocation is needed, restart active agent runs after disabling memory or restart the Gateway.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-100539. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart