CyberRota Analysis
AI-GeneratedThe OpenClaw npm package prior to version 2026.8.1 is vulnerable due to a failure to enforce requester-specific tool policies during Active Memory automatic recall, allowing unauthorized access to sensitive durable memory. This could enable an admitted but denied sender to extract information without directly using memory tools, potentially compromising data integrity and confidentiality. Organizations utilizing OpenClaw with Active Memory and requester-specific rules should prioritize updating to the fixed version to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
OpenClaw (npm package 'openclaw') before 2026.8.1 fails to apply the originating requester's effective tool policy during Active Memory automatic recall. In deployments that use Active Memory together with requester-specific tool rules, deterministic and hidden recall paths can retrieve durable memory and inject it into the agent's context even when toolsBySender explicitly denies that requester access to the memory tools (memory_search, memory_get). As a result, an admitted but denied sender can receive information derived from durable memory in the agent's response without directly invoking any memory tool. The issue is fixed in 2026.8.1.