CyberRota Analysis
AI-GeneratedThe OpenClaw npm package prior to version 2026.8.1 has a vulnerability that allows memory tools to retain access to memory even after an operator has revoked that access. This can lead to unauthorized reading and searching of sensitive memory data during an active session, posing a risk to data confidentiality. Organizations using this package should prioritize updating to version 2026.8.1 to mitigate potential data exposure risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
OpenClaw (npm package 'openclaw') before 2026.8.1 fails to revoke memory tool access when an operator hot-disables memory configuration. Existing memory_search and memory_get tool instances retain the enabled configuration captured at creation time because the execution-time resolver treats explicit disablement like an unavailable configuration snapshot and restores the stale authority. As a result, during an already-running agent turn the model can continue searching and reading durable memory after the operator revoked that access, for the remainder of that run. Exploitation requires memory to be disabled while a previously created memory tool remains active. The issue is fixed in 2026.8.1.