VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Jun 16, 2026· Updated Jun 16, 2026

CVE-2026-53844

CVE-2026-53844

Description

OpenClaw before 2026.4.29 contains a session visibility check bypass vulnerability in shared memory search that allows authenticated callers to access memory entries without proper authorization. Attackers can skip session visibility guards on the search path to retrieve memory entries that should not be visible to their session.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
openclawnpm
< 2026.4.292026.4.29

Affected products

2
  • OpenClaw/Openclawinferred2 versions
    <2026.4.29+ 1 more
    • (no CPE)range: <2026.4.29
    • (no CPE)range: < 2026.4.29

Patches

Vulnerability mechanics

References

4

News mentions

1