CVE-2026-100591 OpenClaw before 2026.7.1 Authentication Bypass via Active Memory
An authorized non-owner can bypass owner checks to persistently toggle global Active Memory, altering memory recall behavior for future sessions.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-100591?
CVE-2026-100591 is a medium-severity missing authorization vulnerability in OpenClaw, published on 26 Sep 2026. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
OpenClaw is an npm-distributed agent gateway. In versions before 2026.7.1, the global Active Memory toggle mutations could omit owner checks. An authorized non-owner external-channel sender could therefore persistently enable or disable Active Memory for the Gateway, disabling memory recall for future sessions or re-enabling global recall where the owner expected it to remain disabled. The issue is limited to persistent global on/off mutations; session-level controls and read-only status remain governed by existing command policy. The issue is fixed in version 2026.7.1. (Suggested title: "OpenClaw before 2026.7.1 missing owner authorization check on Active Memory global toggles".)
Weakness: CWE-862
Which versions are affected by CVE-2026-100591?
How do I fix CVE-2026-100591?
Upgrade to a fixed version.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2026-100591 being exploited?
There is no known exploitation of CVE-2026-100591 in the wild and no public exploit code.
Sources
Also known as GHSA-8rc9-6r79-j4mw, GHSA-xw9g-7xvv-gcjc, MINI-qh48-93fw-436h.