Openclaw Ios
Monthly
OpenClaw iOS builds before 2026.8.11 write complete agent deep-link URLs - including persistent bearer keys - into the iOS unified log with public diagnostic visibility, so anyone who obtains a diagnostic archive (sysdiagnose bundle, device backup, or MDM-collected log set) can recover those keys and replay them inside forged deep links to submit agent requests without the normal on-device confirmation prompt. Exploitation is local and conditional rather than remote: the recovered bearer key must still be unrotated and valid at replay time, and the attacker must reconstruct a working forged deep link, which is why the assessed vector carries AV:L/AC:H (CVSS:3.1 AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N). The status of this issue is that of a genuine but constrained credential-exposure flaw - no public exploit identified at time of analysis, no confirmed actively exploited (CISA KEV) activity, and a vendor patch shipping in 2026.8.11.
OpenClaw iOS builds before 2026.8.11 write complete agent deep-link URLs - including persistent bearer keys - into the iOS unified log with public diagnostic visibility, so anyone who obtains a diagnostic archive (sysdiagnose bundle, device backup, or MDM-collected log set) can recover those keys and replay them inside forged deep links to submit agent requests without the normal on-device confirmation prompt. Exploitation is local and conditional rather than remote: the recovered bearer key must still be unrotated and valid at replay time, and the attacker must reconstruct a working forged deep link, which is why the assessed vector carries AV:L/AC:H (CVSS:3.1 AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N). The status of this issue is that of a genuine but constrained credential-exposure flaw - no public exploit identified at time of analysis, no confirmed actively exploited (CISA KEV) activity, and a vendor patch shipping in 2026.8.11.