CVE-2026-43568
1 advisory.
npm/openclaw CVE-2026-43568: medium, EPSS 0.38%
OpenClaw: Memory dreaming config persistence was reachable from operator.write commands
Action: Upgrade openclaw to 2026.4.10 or later.
npm i openclaw@2026.4.10Affected
| introduced | fixed | last affected |
|---|---|---|
| 2026.4.5 | 2026.4.10 | - |
Fixed versions
| 2026.4.10 |
Sources
- osv: GHSA-5gjc-grvm-m88j
- https://github.com/openclaw/openclaw/security/advisories/GHSA-5gjc-grvm-m88j
- https://github.com/openclaw/openclaw/pull/63872
- https://github.com/openclaw/openclaw/commit/6af17b39e11f5f35e23b7e5a5f71a7d0aa3c7310
- https://github.com/openclaw/openclaw
CVE-2026-43568 · published · modified · JSON