Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.9

OpenClaw: Untrusted Websites Can Inject Code into Android App

published 6 months ago
Summary

If an attacker tricks a user into visiting a malicious website using OpenClaw, they may be able to inject malicious code into the app. This could happen if the user is using an older version of OpenClaw before 2026.3.22. To fix this, update to OpenClaw version 2026.3.22 or later.

What to do
  • Update steipete openclaw to version 2026.3.22.
  • Update GitHub Actions openclaw to version 2026.3.22.
Affected software
Ecosystem VendorProductAffected versions
npm steipete openclaw < 2026.3.22
Fix: upgrade to 2026.3.22
npm GitHub Actions openclaw < 2026.3.22
Fix: upgrade to 2026.3.22
Original advisory text
OpenClaw before 2026.3.22 contains an unvalidated WebView JavascriptInterface vulnerability allowing attackers to inject arbitrary instructions. Untrusted pages can invoke the canvas bridge to exec...
OpenClaw before 2026.3.22 contains an unvalidated WebView JavascriptInterface vulnerability allowing attackers to inject arbitrary instructions. Untrusted pages can invoke the canvas bridge to execute malicious code within the Android application context.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
9.9 Critical
Type
CWE-77Command Injection
CWE-940Improper Verification of Source of a Communication Channel
Timeline
Published10 Apr 2026
Updated10 Apr 2026
First seen26 Mar 2026
Sources
GHSA-cxmw-p77q-wchg · OSV
Track software like this
Free during beta