Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-43568

OpenClaw versions 2026.4.5 before 2026.4.10 contain a privilege escalation vulnerability allowing write-scoped operators to modify persistent memory dreaming settings. Attackers with write-scoped gateway access can toggle admin-class configuration mutations through the /dreaming endpoint to escalate privileges.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 10.4%
CVSS Severity
CVSS v3 Score 6.5
Products affected by CVE-2026-43568
  • Openclaw » Openclaw » Version: 2026.4.5
    cpe:2.3:a:openclaw:openclaw:2026.4.5
  • Openclaw » Openclaw » Version: 2026.4.7
    cpe:2.3:a:openclaw:openclaw:2026.4.7
  • Openclaw » Openclaw » Version: 2026.4.7-1
    cpe:2.3:a:openclaw:openclaw:2026.4.7-1
  • Openclaw » Openclaw » Version: 2026.4.8
    cpe:2.3:a:openclaw:openclaw:2026.4.8
  • Openclaw » Openclaw » Version: 2026.4.9
    cpe:2.3:a:openclaw:openclaw:2026.4.9


Products
Pricing
Contact Us

Shodan ® - All rights reserved