CVE-2026-53844CWE-862

OpenClaw < 2026.4.29 - Session Visibility Check Bypass in Shared Memory Search

Medium · published June 16, 2026

CVSS v4.0
6.0
EPSS
0%
Percentile
28.7
In the wild
Unconfirmed
What it is

OpenClaw before 2026.4.29 contains a session visibility check bypass vulnerability in shared memory search that allows authenticated callers to access memory entries without proper authorization. Attackers can skip session visibility guards on the search path to retrieve memory entries that should not be visible to their session.

The record
Technical detail
CVSS v4.0
6.0 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00361 · 28.7th percentile
Weakness
CWE-862 · Missing Authorization
Published
2026-06-16T18:04Z
EPSS history
Timeline
  • 16 JUN 18:04Z
    OpenClaw < 2026.4.29 - Session Visibility Check Bypass in Shared Memory Search
    cvelistv5