7.1

CVSS Score

4.0

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-43568

CVE-2026-43568: OpenClaw 2026.4.5 < 2026.4.10 - Privilege Escalation via Memory Dreaming Configuration in /dreaming Endpoint

OpenClaw versions 2026.4.5 before 2026.4.10 contain a privilege escalation vulnerability allowing write-scoped operators to modify persistent memory dreaming settings. Attackers with write-scoped gateway access can toggle admin-class configuration mutations through the /dreaming endpoint to escalate privileges.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-43568

CVE-2026-43568:

7.1

CVSS Score

4.0

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	>= 2026.4.5, < 2026.4.10	2026.4.10

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The core of the vulnerability lies in the dreaming command handler, located within the registerDreamingCommand function. This handler failed to check if the user possessed the necessary operator.admin privileges before modifying the persistent 'dreaming' configuration. This allowed any user with operator.write access to change a sensitive, admin-level setting. The vulnerability was compounded by how the system handled client permissions; if a client had no scopes, the permission list was passed as undefined rather than an empty array. The initial implementation of the fix in the command handler would not have correctly handled this undefined case. Therefore, a second change was required in the chatHandlers to normalize missing scopes to an empty array, ensuring the new permission check would be robust and not bypassed. An attacker would trigger this vulnerability by sending a /dreaming on or /dreaming off command through the gateway without having the required operator.admin scope.

Vulnerable functions

registerDreamingCommand

extensions/memory-core/src/dreaming-command.ts

This function registers the `/dreaming` command. The handler for this command did not perform any authorization checks before allowing a user to enable or disable the 'dreaming' feature. This allowed a user with only `operator.write` scope to modify a persistent configuration that should have required `operator.admin` scope. The vulnerability lies in the anonymous handler function defined within `registerDreamingCommand`.

chatHandlers

src/gateway/server-methods/chat.ts

This object contains the handler for `chat:send` requests. The handler constructs the context for command execution. Before the patch, if a client connected without any scopes, the `gatewayClientScopes` property would be `undefined`. The new authorization check in `registerDreamingCommand` would not correctly block a request with `undefined` scopes. This fix ensures that a client with no scopes is treated as having an empty list of scopes (`[]`), which allows the authorization check to correctly deny the request. While not the primary vulnerable function, it was a necessary part of the overall fix to prevent bypassing the new security control.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.