Session Visibility Check Bypass in OpenClaw by OpenClaw Vendor

CVE-2026-53844

What is CVE-2026-53844?

OpenClaw, prior to version 2026.4.29, has a vulnerability that allows authenticated users to bypass session visibility checks during shared memory searches. This weakness enables attackers to gain unauthorized access to memory entries that should be restricted based on session permissions. By circumventing the session visibility guards along the search path, malicious actors can retrieve sensitive information and potentially exploit this flaw for further attacks.

References