CVE-2026-95815

Received Received - Intake

OpenClaw iOS Diagnostic Log Exposure Leading to Key Replay

Publication date: 2026-09-22

Last updated on: 2026-09-22

Assigner: VulnCheck

Description

OpenClaw iOS before 2026.8.11 logs complete agent deep-link URLs including persistent bearer keys to unified logs as public diagnostic data. Attackers who obtain diagnostic archives can recover unrotated keys and replay them in forged deep links to submit agent requests without local confirmation prompts.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-22

Last Modified

2026-09-22

Generated

2026-09-23

AI Q&A

2026-09-23

EPSS Evaluated

N/A

NVD

CVE-2026-95815

Affected Vendors & Products

Vendor	Product	Version / Range
openclaw	ios	to 2026.8.11 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-532	The product writes sensitive information to a log file.

Attack-Flow Graph

Executive Summary

OpenClaw iOS before 2026.8.11 logs complete agent deep-link URLs including persistent bearer keys to unified logs as public diagnostic data. Attackers who access these logs can recover unrotated keys and replay them in forged deep links to submit agent requests without user confirmation.

Detection Guidance

Check OpenClaw iOS unified logs for deep-link URLs containing bearer keys. Search logs for persistent authentication tokens or sensitive data exposure. Review diagnostic archives for unrotated keys that could be replayed.

Impact Analysis

Attackers could gain unauthorized access to your OpenClaw agent by exploiting recovered bearer keys from diagnostic logs. This could allow them to submit requests on your behalf without your knowledge or consent.

Compliance Impact

This vulnerability likely violates data protection regulations like GDPR and HIPAA due to unauthorized access to persistent authentication keys and exposure of sensitive data in logs. It may constitute a breach of confidentiality and security requirements.

Mitigation Strategies

Upgrade OpenClaw iOS to version 2026.8.11 or later to address the logging issue. Rotate all bearer keys immediately to invalidate any exposed tokens. Restrict access to diagnostic archives and logs containing sensitive data.

Hi! I’m here to help you understand CVE-2026-95815. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70