EUVD-2026-37146
GHSA-6jm4-83g2-35gv
Severity by source
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-reachable by low-privileged authenticated users; confidentiality-only impact with no scope change, as unauthorized memory access remains within the application boundary.
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
2Blast Radius
ecosystem impact- 1 npm packages depend on openclaw (1 direct, 0 indirect)
Ecosystem-wide dependent count for version 2026.4.29.
DescriptionCVE.org
OpenClaw before 2026.4.29 contains a session visibility check bypass vulnerability in shared memory search that allows authenticated callers to access memory entries without proper authorization. Attackers can skip session visibility guards on the search path to retrieve memory entries that should not be visible to their session.
AnalysisAI
Session visibility check bypass in OpenClaw's shared memory search component allows authenticated low-privileged users to retrieve memory entries belonging to other sessions without proper authorization. All OpenClaw versions prior to 2026.4.29 are affected; the flaw (CWE-862, Missing Authorization) exists because the session visibility guard is not enforced on the shared memory search code path, yielding a high confidentiality impact against multi-session deployments. No public exploit code has been identified and the vulnerability is not listed in the CISA KEV catalog; however, the CVSS 4.0 score of 6.0 with VC:H signals meaningful data exposure risk for any environment where multiple users or sessions operate concurrently.
Technical ContextAI
OpenClaw (CPE: cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:*) implements a shared memory architecture in which session-scoped entries are stored and made searchable across the application. The root cause is CWE-862 (Missing Authorization): the code path serving shared memory search requests does not invoke - or does not correctly enforce - the session visibility check that is intended to gate access to per-session memory entries. Under CWE-862, the system performs a sensitive operation (cross-session memory lookup) without verifying that the requesting caller has the necessary authorization for that specific resource. The CVSS 4.0 vector's AT:P metric (Attack Requirements: Present) confirms that exploitation is not unconditional - a specific invocation pattern, parameter set, or API endpoint of the shared memory search interface must be reached for the guard bypass to occur.
RemediationAI
The primary remediation is to upgrade OpenClaw to version 2026.4.29 or later, which introduces the corrected session visibility enforcement on the shared memory search path per the vendor advisory at https://github.com/openclaw/openclaw/security/advisories/GHSA-72fw-cqh5-f324. If immediate patching is not feasible, restrict authenticated access to the shared memory search endpoint to only the most-trusted, explicitly authorized accounts - reducing the pool of callers who could trigger the bypass. As a further compensating control, consider disabling or rate-limiting the shared memory search API for untrusted or guest-level sessions, noting that this may impair legitimate multi-session search functionality. Deploying network-layer access controls (firewall rules or API gateway policies) to limit which client network segments can reach the shared memory search interface will reduce exposure in the interim. Monitor application logs for anomalous cross-session memory access patterns as a detection measure while patch deployment is pending.
Auth bypass in OpenClaw voice-call extension before 2026.2.1. EPSS 0.68%. PoC and patch available.
Privilege escalation in OpenClaw (pre-2026.3.28) allows unauthenticated remote attackers to gain administrative access b
OpenClaw versions 2026.2.22 through 2026.2.24 contain a privilege escalation vulnerability that allows authenticated att
An authorization mismatch vulnerability in OpenClaw versions prior to 2026.3.1 allows authenticated users with operator.
OpenClaw versions prior to 2026.1.29 automatically establish WebSocket connections to attacker-controlled gateway URLs e
Path traversal in OpenClaw through version 2026.3.23 enables unauthenticated remote attackers to read arbitrary files in
OpenClaw sandbox browser functionality launches x11vnc for noVNC observer sessions without requiring authentication, all
OpenClaw versions before 2026.2.26 allow authenticated attackers to write arbitrary files outside the workspace director
OpenClaw versions prior to 2026.2.22 contain a shell environment variable injection vulnerability in the system.run func
OpenClaw versions prior to 2026.2.22 contain a resource exhaustion vulnerability where the application fails to consiste
OpenClaw versions prior to 2026.3.1 contain a sandbox escape vulnerability that allows authenticated attackers with low
OpenClaw versions 2026.1.30 and below fail to validate Telegram webhook secret tokens when `channels.telegram.webhookSec
Same weakness CWE-862 – Missing Authorization
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today