https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 14:35:23 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-100537 <p>OpenClaw (npm package &#39;openclaw&#39;) before 2026.8.1 fails to apply the originating requester&#39;s effective tool policy during Active Memory automatic recall. In deployments that use Active Memory together with requester-specific tool rules, deterministic and hidden recall paths can retrieve durable memory and inject it into the agent&#39;s context even when toolsBySender explicitly denies that requester access to the memory tools (memory_search, memory_get). As a result, an admitted but denied sender can receive information derived from durable memory in the agent&#39;s response without directly invoking any memory tool. The issue is fixed in 2026.8.1.</p> <p>OpenClaw (npm package &#39;openclaw&#39;) before 2026.8.1 fails to apply the originating requester&#39;s effective tool policy during Active Memory automatic recall. In deployments that use Active Memory together with requester-specific tool rules, deterministic and hidden recall paths can retrieve durable memory and inject it into the agent&#39;s context even when toolsBySender explicitly denies that requester access to the memory tools (memory_search, memory_get). As a result, an admitted but denied sender can receive information derived from durable memory in the agent&#39;s response without directly invoking any memory tool. The issue is fixed in 2026.8.1.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-100537 https://vulnerability.circl.lu/vuln/ghsa-368p-92qh-j8q4 <p>OpenClaw (npm package &#39;openclaw&#39;) before 2026.8.1 fails to apply the originating requester&#39;s effective tool policy during Active Memory automatic recall. In deployments that use Active Memory together with requester-specific tool rules, deterministic and hidden recall paths can retrieve durable memory and inject it into the agent&#39;s context even when toolsBySender explicitly denies that requester access to the memory tools (memory_search, memory_get). As a result, an admitted but denied sender can receive information derived from durable memory in the agent&#39;s response without directly invoking any memory tool. The issue is fixed in 2026.8.1.</p> <p>OpenClaw (npm package &#39;openclaw&#39;) before 2026.8.1 fails to apply the originating requester&#39;s effective tool policy during Active Memory automatic recall. In deployments that use Active Memory together with requester-specific tool rules, deterministic and hidden recall paths can retrieve durable memory and inject it into the agent&#39;s context even when toolsBySender explicitly denies that requester access to the memory tools (memory_search, memory_get). As a result, an admitted but denied sender can receive information derived from durable memory in the agent&#39;s response without directly invoking any memory tool. The issue is fixed in 2026.8.1.</p> https://vulnerability.circl.lu/vuln/ghsa-368p-92qh-j8q4