CVE-2026-100535 OpenClaw CVE debrief

Who should care

Defenders and developers using the OpenClaw npm package should assess exposure and prioritize verification and remediation. They should review session-memory capture and dreaming configurations, verify and upgrade to version 2026.8.1 or later, and monitor for suspicious activity. Security teams and operators should also be aware of the potential for actions beyond the authority of the original turn and possible escalation of privileges.

Why it matters

CVE-2026-100535 is a high-severity vulnerability in the OpenClaw npm package that can lead to potential escalation of privileges and actions beyond the authority of the original turn. Defenders and developers should assess exposure and prioritize verification and remediation.

• Potential for actions beyond the authority of the original turn
• Possible escalation of privileges
• Need for verification of session-memory capture and dreaming configurations
• Priority for upgrading to version 2026.8.1 or later

Technical summary

The OpenClaw npm package versions >= 2026.4.5 and < 2026.8.1 can lose the originating requester's restrictions and untrusted provenance when session-derived text is persisted to session memory. This vulnerability can lead to actions beyond the authority of the original turn in deployments where session-memory capture and dreaming are enabled. Defenders should prioritize verifying and upgrading to version 2026.8.1 or later, and review session-memory capture and dreaming configurations for potential exposure without unsupported root-cause or exploit claims.

Defensive priority

Defenders should prioritize verifying and upgrading to version 2026.8.1 or later, and review session-memory capture and dreaming configurations.

Recommended defensive actions

• Verify and upgrade to version 2026.8.1 or later
• Review session-memory capture and dreaming configurations
• Monitor for suspicious activity
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, but evidence of exploitation is limited. The vulnerability affects OpenClaw npm package versions >= 2026.4.5 and < 2026.8.1. There is no indication of active exploitation, but defenders should verify and upgrade to version 2026.8.1 or later. Review session-memory capture and dreaming configurations for potential exposure.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.