Yetval

**Name of the Vulnerable Software and Affected Versions** OpenClaw for iOS versions prior to 2026.8.11 **Description** The application stores Gateway credentials as cleartext JSON within App Group UserDefaults rather than using the secure device Keychain. This allows attackers who obtain unencrypted device backups or extracted App Group containers to recover valid Gateway tokens and passwords, enabling them to authenticate with operator authority. **Recommendations** Update OpenClaw for iOS to version 2026.8.11 or later.

**Name of the Vulnerable Software and Affected Versions** openclaw versions prior to 2026.7.1 **Description** The software fails to enforce the owner-only requirement for persistent policy changes via the `/activation` endpoint in group channels. This allows an authorized sender who is not the owner to modify whether the agent requires mention-based activation. Such an action can lead to the agent responding more broadly to group traffic or suppressing expected activation behavior. **Recommendations** Update to version 2026.7.1.

**Name of the Vulnerable Software and Affected Versions** OpenClaw versions prior to 2026.7.1 **Description** An authorization bypass exists in the '/export-trajectory' endpoint, allowing non-owner senders to request and receive trajectory bundles intended only for the owner. This occurs due to insufficient authorization checks, enabling attackers to access prompts, model messages, tool schemas, runtime events, and local path metadata from affected sessions. **Recommendations** Update to version 2026.7.1 or later. Restrict access to the '/export-trajectory' endpoint as a temporary mitigation measure.

**Name of the Vulnerable Software and Affected Versions** OpenClaw versions prior to 2026.7.1 **Description** An authorization bypass exists in the diagnostics export command. This flaw allows non-owner channel senders to access host diagnostic bundles reserved for owners, enabling them to request and receive sensitive details regarding the host, configuration, runtime, and connected services. **Recommendations** Update to version 2026.7.1.

**Name of the Vulnerable Software and Affected Versions** OpenClaw versions prior to 2026.7.1 **Description** Insufficient authorization for non-owner users allows the execution of MCP configuration changes via the '/mcp set' and '/mcp unset' endpoints. This flaw enables attackers to persist arbitrary stdio MCP commands that run with OpenClaw process privileges during configuration loading, which can compromise host confidentiality, integrity, and availability. **Recommendations** Update to version 2026.7.1 or later.