Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenClaw versions 2026.4.5 before 2026.4.10 contain a privilege escalation vulnerability allowing write-scoped operators to modify persistent memory dreaming settings. Attackers with write-scoped gateway access can toggle admin-class configuration mutations through the /dreaming endpoint to escalate privileges.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-43568 Privilege Escalation in OpenClaw 2026.4.5 Before 2026.4.10 via Dreaming Endpoint https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-43568
Post summary
The text announces and describes a privilege‑escalation vulnerability (CVE‑2026‑43568) in OpenClaw versions 2026.4.5 through 2026.4.9, specifying the affected component (Dreaming Endpoint).
CVE-2026-43568 OpenClaw versions 2026.4.5 before 2026.4.10 contain a privilege escalation vulnerability allowing write-scoped operators to modify persistent memory dreaming settings… https://www.cve.org/CVERecord?id=CVE-2026-43568
Post summary
The text announces the CVE-2026-43568 privilege escalation flaw in OpenClaw versions 2026.4.5 through 2026.4.9, providing key technical details without any mention of exploitation or patch.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openclaw | openclaw | - | node.js | - |