How to fix or mitigate CVE-2026-43568?

Within 24 hours: Identify all deployments of OpenClaw npm package versions 2026.4.5-2026.4.9 in production and development environments. Within 7 days: Update to OpenClaw v2026.4.10 or later and verify operator.write role users cannot access the /dreaming endpoint. Within 30 days: Conduct access audit of any configuration changes made to gateway persistent memory settings during the vulnerability window.

OpenClaw CVE-2026-43568

Q: What is the CVSS score of CVE-2026-43568?

CVE-2026-43568 has a CVSS 4.0 base score of 7.1 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

Q: Which versions of OpenClaw are affected by CVE-2026-43568?

OpenClaw npm package versions 2026.4.5-2026.4.9 contain a privilege escalation vulnerability allowing write-scoped operators to gain administrative access to system configuration.. A patch is available.

EUVD-2026-27287 HIGH

Missing Authorization (CWE-862)

2026-05-05 VulnCheck

Authentication Bypass Privilege Escalation Openclaw

7.1

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

7.1 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Analysis Updated

May 05, 2026 - 12:45 vuln.today

v2 (cvss_changed)

Re-analysis Queued

May 05, 2026 - 12:37 vuln.today

cvss_changed

Severity Changed

May 05, 2026 - 12:37 NVD

MEDIUM HIGH

CVSS changed

May 05, 2026 - 12:37 NVD

6.5 (MEDIUM) 7.1 (HIGH)

Source Code Evidence Fetched

May 05, 2026 - 12:21 vuln.today

Analysis Generated

May 05, 2026 - 12:21 vuln.today

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

1 npm packages depend on openclaw (1 direct, 0 indirect)

Ecosystem-wide dependent count for version 2026.4.5.

DescriptionCVE.org

OpenClaw versions 2026.4.5 before 2026.4.10 contain a privilege escalation vulnerability allowing write-scoped operators to modify persistent memory dreaming settings. Attackers with write-scoped gateway access can toggle admin-class configuration mutations through the /dreaming endpoint to escalate privileges.

AnalysisAI

OpenClaw npm package versions 2026.4.5 through 2026.4.9 allow privilege escalation from write-scoped operators to administrator-level configuration access. Authenticated attackers with 'operator.write' gateway credentials can modify persistent memory dreaming settings via the /dreaming endpoint, bypassing intended admin-only restrictions. Vendor-released patch available (v2026.4.10); no active exploitation confirmed at time of analysis.

Technical ContextAI

OpenClaw is an npm-distributed AI gateway platform with role-based access control for configuration management. The vulnerability stems from CWE-862 (Missing Authorization), where the /dreaming endpoint handler failed to validate caller scope before persisting configuration mutations. The dreaming subsystem controls memory persistence behavior-a privileged setting intended for operator.admin scope only. The flaw occurred in the dreaming-command.ts handler and chat.ts gateway dispatcher: write-scoped clients could invoke persistent config changes, and missing gatewayClientScopes were silently treated as privileged rather than unprivileged. The affected package (cpe:2.3:a:openclaw:openclaw) distributed via npm ecosystem allows granular scope assignment (operator.write, operator.admin) for gateway clients, but the authorization check was absent in the configuration persistence path.

RemediationAI

Upgrade to OpenClaw version 2026.4.10 or later via npm (npm update openclaw or npm install openclaw@2026.4.10). The latest stable release 2026.4.14 includes the fix from commit 6af17b39e11f5f35e23b7e5a5f71a7d0aa3c7310 and PR #63872. Installation instructions and release notes are available at the vendor advisory https://github.com/openclaw/openclaw/security/advisories/GHSA-5gjc-grvm-m88j. If immediate patching is not feasible, restrict /dreaming endpoint access at the gateway/reverse proxy layer to admin-scoped clients only, or disable the dreaming feature entirely via configuration until upgrade (verify disable method in OpenClaw documentation as this workaround may impact memory persistence functionality). Review audit logs for unauthorized /dreaming invocations by write-scoped accounts between deployment of versions 2026.4.5-2026.4.9 and patch application. Restricting endpoint access trades memory dreaming capabilities for write-scoped users but prevents privilege escalation; disabling dreaming system-wide may degrade AI memory features.