0Xca1X

**Name of the Vulnerable Software and Affected Versions** OpenClaw for iOS versions 2026.7.1 through 2026.8.10 **Description** The Control UI fails to enforce saved Gateway TLS pins. While native connections maintain the saved Gateway fingerprint, the authenticated Terminal and session Dashboard WebViews do not. An attacker capable of redirecting the host and port and presenting a certificate accepted by iOS system trust can serve a fraudulent Control UI page. When a user opens the Terminal or session Dashboard, this page can capture the injected Gateway token or password. These stolen credentials can grant operator access, allowing the attacker to read sensitive Gateway state and invoke host-capable tools. **Recommendations** Update to version 2026.8.11.