EUVD-2026-21438
GHSA-cxmw-p77q-wchg
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessDeliver malicious webpage to victim
-
DeliveryWebView loads untrusted content
-
ExploitInject JavaScript via canvas bridge
-
ExecutionInvoke unvalidated JavascriptInterface
-
ImpactExecute arbitrary code in app context
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A07:2025 - Authentication Failures
ASVS 5.0
V12 - Secure Communication Communication channel verification
|
| Exploitation Conditions | Requires OpenClaw before version 2026.3.22 with WebView JavascriptInterface enabled (default). Victim must visit or be redirected to a malicious webpage via the OpenClaw application. Remote unauthenticated attacker can inject code through the unvalidated canvas bridge after user interaction. |
| Impact | CVSS 8.8 reflects high severity: unauthenticated network attack, low complexity, requiring only user interaction (clicking malicious link). No public exploit identified at time of analysis. Blast radius limited to Android applications using vulnerable OpenClaw versions; patch availability reduces urgency. Moderate observed exploitation activity. Organizations should prioritize patching before 2026.3.22. |
| Exploit ScenarioDerived | Attacker hosts malicious webpage with injected JavaScript targeting OpenClaw's unvalidated WebView JavascriptInterface. Victim visits page via Android browser or app WebView, triggering automatic canvas bridge invocation executing arbitrary code within application context. No authentication required. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Apr 10, 2026
Remote code execution in OpenClaw Android application (versions before 2026.3.22) allows unauthenticated attackers to execute arbitrary code through an unvalidated WebView JavascriptInterface. Attackers craft malicious web pages that invoke the exposed canvas bridge, executing instructions within the application's Android context when users interact with untrusted content. The vulnerability requires user interaction but no authentication, enabling high-severity compromise of confidentiality, integrity, and availability. No public exploit identified at time of analysis.
RemediationAI
Vendor-released patch: upgrade to OpenClaw version 2026.3.22 or later, which addresses the unvalidated JavascriptInterface exposure. The fix implements proper origin validation for WebView bridge methods and restricts JavaScript interface access to trusted content sources. Upstream commits 630f1479c44f78484dfa21bb407cbe6f171dac87 and 8b02ef133275be96d8aac2283100016c8a7f32e5 contain the security patches. Until upgrade is feasible, disable WebView functionality or restrict application usage to prevent loading untrusted web content. Consult vendor advisory: https://github.com/openclaw/openclaw/security/advisories/GHSA-cxmw-p77q-wchg and VulnCheck analysis: https://www.vulncheck.com/advisories/openclaw-arbitrary-code-execution-via-unvalidated-webview-javascriptinterface for additional implementation guidance.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in npm
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
CWE-940 flaw in Android WebView implementation exposes JavascriptInterface without proper origin validation. The canvas bridge interface accepts commands from any loaded webpage, bypassing Android's security boundary between web content and native application code. Affects cpe:2.3:a:openclaw:openclaw prior to 2026.3.22 release.
Know when Openclaw gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
2DescriptionCVE.org
OpenClaw before 2026.3.22 contains an unvalidated WebView JavascriptInterface vulnerability allowing attackers to inject arbitrary instructions. Untrusted pages can invoke the canvas bridge to execute malicious code within the Android application context.
Blast Radius
ecosystem impact- 5 npm packages depend on openclaw (5 direct, 0 indirect)
Ecosystem-wide dependent count for version 2026.3.22.
Executive ViewAI
OpenClaw Android application versions prior to 2026.3.22 contain a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary code on user devices through malicious web content. Any user who interacts with a crafted webpage while the vulnerable app is installed faces complete compromise of device confidentiality, integrity, and availability, making this a critical deployment risk for organizations with Android users relying on this application.
Apply vendor patch. Until patching is complete, restrict user access to untrusted websites via mobile security policies, disable JavaScript execution in WebView contexts where technically feasible, and implement network-level content filtering to block known malicious domains. Monitor device logs for unexpected application behavior or privilege escalation attempts.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Remote Code Execution represents the critical moment when an attacker successfully runs arbitrary code on a target system without physical access.
Related Vulnerabilities in OpenClaw Multiple Authorization and Privilege Escalation
View all 29Auth bypass in OpenClaw voice-call extension before 2026.2.1. EPSS 0.68%. PoC and patch available.
Privilege escalation in OpenClaw (pre-2026.3.28) allows unauthenticated remote attackers to gain administrative access b
OpenClaw versions 2026.2.22 through 2026.2.24 contain a privilege escalation vulnerability that allows authenticated att
An authorization mismatch vulnerability in OpenClaw versions prior to 2026.3.1 allows authenticated users with operator.
OpenClaw versions prior to 2026.1.29 automatically establish WebSocket connections to attacker-controlled gateway URLs e
Path traversal in OpenClaw through version 2026.3.23 enables unauthenticated remote attackers to read arbitrary files in
Authentication bypass in OpenClaw before 2026.5.3 allows remote attackers with low privileges to receive agent responses
Directory-context bypass in OpenClaw before 2026.8.1 allows authenticated attackers with user interaction to reuse an 'a
Unauthenticated access to the noVNC observer interface in OpenClaw's Docker sandbox browser allows anyone who can reach
OpenClaw versions before 2026.2.26 allow authenticated attackers to write arbitrary files outside the workspace director
OpenClaw versions prior to 2026.2.22 contain a shell environment variable injection vulnerability in the system.run func
OpenClaw versions prior to 2026.2.22 contain a resource exhaustion vulnerability where the application fails to consiste
Exploit-DB