AI agent vulnerability · OpenClaw

CVE-2026-43583: OpenClaw: Delivery queue recovery could lose group tool-policy context for media replay

lowCVSS 4.0 2.3GHSA-r77c-2cmr-7p47

Summary Delivery queue recovery could lose group tool-policy context for media replay. Affected Packages / Versions - Package: openclaw - Ecosystem: npm - Affected versions: = 2026.4.10 = 2026.4.14 Impact Recovered queued outbound media could be replayed without the original session context needed to enforce group tool policy, weakening channel media restrictions after restart/recovery.

Published Apr 17, 2026 · Updated May 12, 2026

Affected packages

openclaw

Ecosystem: npm
Affected: >= 2026.4.10, < 2026.4.14
Fixed in: 2026.4.14
Check: npm ls openclaw

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

Summary

Delivery queue recovery could lose group tool-policy context for media replay.

Affected Packages / Versions

Package: openclaw
Ecosystem: npm
Affected versions: >= 2026.4.10 < 2026.4.14
Patched versions: >= 2026.4.14

Impact

Recovered queued outbound media could be replayed without the original session context needed to enforce group tool policy, weakening channel media restrictions after restart/recovery.

Technical Details

The fix persists and replays the relevant session context with delivery queue entries so recovered media dispatch goes through the same policy checks.

Fix

The issue was fixed in #66025. The first stable tag containing the fix is v2026.4.14, and [email protected] includes the fix.

Fix Commit(s)

48aae82bbc19ba8b0741e61a08063eb0d1df464e
PR: #66025

Release Process Note

Users should upgrade to openclaw 2026.4.14 or newer. The latest npm release, 2026.4.14, already includes the fix.

Credits

Thanks to @zsxsoft, with sponsorship from @KeenSecurityLab and @qclawer for reporting this issue.

Credited to zsxsoft, KeenSecurityLab, qclawer.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More OpenClaw vulnerabilities

All OpenClaw entries