CVE-2026-100591
Received Received - Intake

Active Memory Global Toggle Authorization Bypass in OpenClaw

Publication date: 2026-09-26

Last updated on: 2026-09-26

Assigner: VulnCheck

Description
OpenClaw is an npm-distributed agent gateway. In versions before 2026.7.1, the global Active Memory toggle mutations could omit owner checks. An authorized non-owner external-channel sender could therefore persistently enable or disable Active Memory for the Gateway, disabling memory recall for future sessions or re-enabling global recall where the owner expected it to remain disabled. The issue is limited to persistent global on/off mutations; session-level controls and read-only status remain governed by existing command policy. The issue is fixed in version 2026.7.1. (Suggested title: "OpenClaw before 2026.7.1 missing owner authorization check on Active Memory global toggles".)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-26
Last Modified
2026-09-26
Generated
2026-09-26
AI Q&A
2026-09-26
EPSS Evaluated
N/A
NVD
CVE-2026-100591
EUVD
EUVD-2026-87460

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
openclaw openclaw to 2026.7.1 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

OpenClaw before version 2026.7.1 has a vulnerability where global Active Memory toggle mutations lack owner authorization checks. An authorized but non-owner external-channel sender can persistently enable or disable Active Memory for a Gateway, affecting memory recall functionality.

Detection Guidance

Detecting this vulnerability requires checking OpenClaw versions and monitoring for unauthorized Active Memory toggles. Verify installed versions with 'npm list openclaw' or 'openclaw --version'. Inspect logs for unexpected global Active Memory state changes, especially from non-owner users. Check for commands enabling or disabling Active Memory globally in external channels.

Impact Analysis

This vulnerability allows unauthorized users to disable memory recall for future sessions or re-enable global recall when the owner intended it to remain disabled. It could lead to loss of stored memories or unexpected behavior in Gateway interactions.

Compliance Impact

This vulnerability could potentially impact compliance with GDPR and HIPAA by allowing unauthorized users to alter memory recall functionality. For GDPR, this may affect data integrity and user consent mechanisms if memory recall is disabled. For HIPAA, it could compromise data availability and integrity if Active Memory controls are manipulated.

Mitigation Strategies
  • Upgrade OpenClaw to version 2026.7.1 or later to address the missing authorization check.
  • Disable global Active Memory commands in external channels or restrict command access to owners before upgrading.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-100591. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart