Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-100592— OpenClaw before 2026.7.1 Authentication Bypass via Memory Dreaming

Quick assessment

Affected
OpenClaw OpenClaw
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

OpenClaw 是一个通过 npm 分发的智能体网关。在版本 >= 2026.4.10 且 < 2026.7.1 中，持久化“梦境”（dreaming）状态变更操作遗漏了对所有者权限的检查。已授权但非所有者的外部频道发送者可以发出持久化的 和 命令，以启用或禁用网关的“记忆核心”梦境行为，从而在所有者期望其保持禁用的情况下，禁用后台记忆处理过程，或重新启用持久化记忆提升功能；其对机密性、完整性和可用性的实际影响取决于存储的对话内容以及后续的记忆使用情况。只读状态查询和帮助命令仍受正常命令策略的约束。该问题已在版本

CVSS 6.3 · Medium EPSS 0.16% · P5

Affected Version Matrix 2

VendorProduct Version RangeStatus
OpenClaw OpenClaw 2026.4.10< 2026.7.1 affected
2026.7.1 unaffected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-100592

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
OpenClaw before 2026.7.1 Authentication Bypass via Memory Dreaming
Source: CVE Program / CVE List V5
Vulnerability Description
OpenClaw is an agent gateway distributed via npm. In versions >= 2026.4.10 and < 2026.7.1, persistent memory dreaming mutations omit owner permission checks. An authorized but non-owner external-channel sender can issue the persistent '/dreaming on' and '/dreaming off' commands to enable or disable the Gateway's Memory Core dreaming behavior, disabling background memory processing or re-enabling durable memory promotion where the owner expected it to remain disabled; the practical confidentiality, integrity, and availability impact depends on stored conversation material and subsequent memory use. Read-only status and help commands remain governed by normal command policy. The issue is fixed in version 2026.7.1. As a workaround, disable dreaming commands in external channels or restrict channel command access to owners.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
授权机制缺失
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
OpenClaw OpenClaw 2026.4.10 ~ 2026.7.1 -

II. Public POCs for CVE-2026-100592

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-100592

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-100592 (2)

Same Patch Batch · OpenClaw · 2026-09-26 · 79 CVEs total

CVE-2026-100575 8.8 HIGH OpenClaw Slack before 2026.8.1 Authentication Bypass via Group DM
CVE-2026-100580 8.8 HIGH OpenClaw before 2026.7.1 Remote Code Execution via cron tool
CVE-2026-100586 8.8 HIGH OpenClaw Codex before 2026.7.1 Authorization Bypass via Bind
CVE-2026-100544 8.8 HIGH openclaw voice-call before 2026.8.1 Authorization Bypass
CVE-2026-100552 8.8 HIGH OpenClaw before 2026.8.1 Policy Bypass via Native Tools
CVE-2026-100587 8.8 HIGH OpenClaw before 2026.7.1 Authorization Bypass via Codex Install
CVE-2026-100599 8.8 HIGH OpenClaw 2026.5.1 before 2026.7.1 Remote Code Execution via googlemeet.chrome
CVE-2026-100596 8.8 HIGH OpenClaw before 2026.7.1 Authorization Bypass via MCP Configuration
CVE-2026-100551 8.3 HIGH OpenClaw iOS Control UI TLS Pin Enforcement Bypass
CVE-2026-100568 8.3 HIGH OpenClaw before 2026.8.1 Unauthorized Command Job Access
CVE-2026-100557 8.3 HIGH OpenClaw before 2026.8.1 Authorization Bypass via Skill Tool Dispatch
CVE-2026-100588 8.3 HIGH OpenClaw before 2026.7.1 Authentication Bypass via node.invoke
CVE-2026-100589 8.3 HIGH OpenClaw before 2026.7.1 Sandbox Bypass via Browser Node
CVE-2026-100567 8.2 HIGH OpenClaw before 2026.8.1 DNS Rebinding via CDP Hostname
CVE-2026-100532 8.1 HIGH openclaw WhatsApp before 2026.8.1 Authentication Bypass
CVE-2026-100559 8.0 HIGH OpenClaw before 2026.8.1 Command Injection via Escaped Newlines
CVE-2026-100585 8.0 HIGH OpenClaw before 2026.7.1 Authentication Bypass via MCP Channel
CVE-2026-100561 8.0 HIGH OpenClaw before 2026.8.1 Authentication Bypass via Exec Wrapper
CVE-2026-100570 7.8 HIGH OpenClaw before 2026.8.1 Remote Code Execution via CLOUDSDK_PYTHON_ARGS
CVE-2026-100597 7.8 HIGH OpenClaw before 2026.7.1 Path Traversal via Filesystem Race

Showing top 20 of 79 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: OpenClaw
Same vendor: OpenClaw
Same weakness: CWE-862

V. Comments for CVE-2026-100592

No comments yet

Leave a comment