Get real-time updates on Telegram
CVE-2026-53844: openclaw before 2026.4.29 (exclusive), 2026.4.29 · update beta1, 2026.4.29 · update beta2 (+2 more affected versions)…
CVE-2026-53844. CVSS 3.1 base score 6.5 (MEDIUM, Vendor/CNA). EPSS 0.00361 (percentile 0.28663), scored 22-Oct-2026.
Affected technology
openclaw · before 2026.4.29 (exclusive)
openclaw
openclaw · 2026.4.29 · update beta1
openclaw
openclaw · 2026.4.29 · update beta2
openclaw
openclaw · 2026.4.29 · update beta3
openclaw
openclaw · 2026.4.29 · update beta4
openclaw
OpenClaw · 0 to before 2026.4.29
OpenClaw
Description’s affected range: before 2026.4.29
Component: Not specified by the source
Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · Low privileges required · No user interaction required
What an attacker can do
Attackers can skip session visibility guards on the search path to retrieve memory entries that should not be visible to their session. Vendor/CNA’s CVSS 4.0 assessment (base score 6.0/10) rates confidentiality impact as high; integrity and availability impact as none.
- CWE
- CWE-862
- CCR priority
- 26.1 /100 (P4)
- CVSS 3.1
- 6.5 /10 · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N · Vendor/CNA
- EPSS
- 0.00361 · percentile 0.28663 · 2026-10-22
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-24 01:40:49.068977+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-53844.html