Incorrect authorization in OpenClaw - CVE-2026-100535
Published: November 3, 2026
Vulnerability details
The vulnerability allows a remote user to exceed sender restrictions and potentially access or modify files, execute commands, or affect services using a background agent's broader authority.
The vulnerability exists due to incorrect authorization in OpenClaw's session-memory and dreaming processing when persisted content loses its originating requester's restrictions and untrusted provenance. A remote user can submit instructions through a restricted sender session that, if captured, selected for later processing, and followed by the background model, cause actions beyond the original sender's permitted capabilities.
Exploitation requires a deployment with both session-memory capture and dreaming enabled.