Medium
OpenClaw before 2026.7.1 Authentication Bypass via Active Memory
Type: advisorySource: Official CVE List
OpenClaw is an npm-distributed agent gateway. In versions before 2026.7.1, the global Active Memory toggle mutations could omit owner checks. An authorized non-owner external-channel sender could therefore persistentl…
Products: OpenClawCVEs: CVE-2026-100591