The flaw in the OpenClaw JavaScript package allows an authenticated user who is otherwise denied access to memory tools to retrieve durable memory data indirectly by triggering the Active Memory automatic recall mechanism. The missing enforcement of the originating requester's tool policy lets the attacker obtain information that should have been restricted, resulting in a confidentiality breach of the agent's persistent memory.

Vendors: OpenClaw. Products: the openclaw npm package. Affected versions: any release before 2026.8.1. Upgrades to 2026.8.1 are required to remove the flaw.

The vulnerability has a CVSS score of 2.3, indicating moderate severity. No EPSS score is available, and the flaw is not listed in the CISA KEV catalog. Attackers can exploit the bug by sending requests that activate Active Memory recall, bypassing request‑specific tool rules that normally block memory_access. The exploitation requires possessing valid authentication to the OpenClaw system but does not involve code execution or privilege escalation beyond the denied memory tool rights.