CVE-2026-100537

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.8.1

Description The software fails to apply the originating requester's effective tool policy during Active Memory automatic recall. In deployments using Active Memory with requester-specific tool rules, deterministic and hidden recall paths can retrieve durable memory and inject it into the agent's context. This occurs even when the toolsBySender variable explicitly denies the requester access to the memory search() and memory get() functions. Consequently, a sender who has been admitted but denied access can receive information derived from durable memory in the agent's response without directly invoking any memory tool.

Recommendations Update to version 2026.8.1.