https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 15:01:35 +0000 https://cve.radiocsirt.org/vuln/cve-2026-100537 <p><strong>Affected:</strong> OpenClaw</p> <p>OpenClaw (npm package &#39;openclaw&#39;) before 2026.8.1 fails to apply the originating requester&#39;s effective tool policy during Active Memory automatic recall. In deployments that use Active Memory together with requester-specific tool rules, deterministic and hidden recall paths can retrieve durable memory and inject it into the agent&#39;s context even when toolsBySender explicitly denies that requester access to the memory tools (memory_search, memory_get). As a result, an admitted but denied sender can receive information derived from durable memory in the agent&#39;s response without directly invoking any memory tool. The issue is fixed in 2026.8.1.</p> <p><strong>Affected:</strong> OpenClaw</p> <p>OpenClaw (npm package &#39;openclaw&#39;) before 2026.8.1 fails to apply the originating requester&#39;s effective tool policy during Active Memory automatic recall. In deployments that use Active Memory together with requester-specific tool rules, deterministic and hidden recall paths can retrieve durable memory and inject it into the agent&#39;s context even when toolsBySender explicitly denies that requester access to the memory tools (memory_search, memory_get). As a result, an admitted but denied sender can receive information derived from durable memory in the agent&#39;s response without directly invoking any memory tool. The issue is fixed in 2026.8.1.</p> https://cve.radiocsirt.org/vuln/cve-2026-100537