CVE-2026-100592 Details
Description
OpenClaw is an agent gateway distributed via npm. In versions >= 2026.4.10 and < 2026.7.1, persistent memory dreaming mutations omit owner permission checks. An authorized but non-owner external-channel sender can issue the persistent '/dreaming on' and '/dreaming off' commands to enable or disable the Gateway's Memory Core dreaming behavior, disabling background memory processing or re-enabling durable memory promotion where the owner expected it to remain disabled; the practical confidentiality, integrity, and availability impact depends on stored conversation material and subsequent memory use. Read-only status and help commands remain governed by normal command policy. The issue is fixed in version 2026.7.1. As a workaround, disable dreaming commands in external channels or restrict channel command access to owners.
A vulnerability exists in OpenClaw, an agent gateway distributed via npm, in versions 2026.4.10 prior to 2026.7.1. The issue arises because persistent memory dreaming mutations do not properly check owner permissions. This allows an authorized but non-owner sender in external channels to manipulate the Gateway's Memory Core dreaming behavior by using the '/dreaming on' and '/dreaming off' commands. As a result, they can disrupt background memory processing or incorrectly reactivate durable memory promotion, depending on the owner's expectations. The actual impact on confidentiality, integrity, and availability varies based on the content of stored conversations and how memory is utilized afterward. While the vulnerability has been patched in version 2026.7.1, read-only status and help commands are still subject to the usual command policy, and OpenClaw does not ensure adversarial multi-tenant isolation for shared Gateways.
Users can upgrade to OpenClaw version 2026.7.1 or later. Before upgrading, it is advisable to disable dreaming commands in external channels or limit channel command access to owners.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Sep 26, 2026CISA-ADP
Assessed Oct 5, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/openclaw/openclaw/security/advisories/GHSA-22v4-33m3-8p7m | [email protected] | AdvisoryRemedyVendor |
| https://www.vulncheck.com/advisories/openclaw-before-2026.7.1-authentication-bypass-via-memory-dreaming | [email protected] | AdvisoryRemedy |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-862 | Missing Authorization | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| OpenClaw | >= 2026.4.10, < 2026.7.1 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 5, 2026 | CVE Modified | CISA-ADP |
| Sep 26, 2026 | New CVE Received | [email protected] |