CVE-2026-100535 Details

A privilege escalation vulnerability has been identified in the OpenClaw npm package, specifically in versions 2026.4.5 prior to 2026.8.1. The issue arises when session-derived text is saved to session memory, causing a loss of the original requester's restrictions and untrusted provenance. In environments where session-memory capture and dreaming are activated, a restricted external sender can embed instructions that are later executed by an unattended background agent, referred to as a dreaming agent. This agent possesses broader file and command capabilities, allowing it to perform actions beyond the original sender's authority, potentially impacting files, commands, or services accessible to that agent.

Users are advised to upgrade OpenClaw to version 2026.8.1 or later. If an immediate upgrade is not possible, consider disabling dreaming for agents that interact with restricted external senders, turning off session-memory capture for those conversations, or running background memory processing without allowing mutations or command tools.