CVE-2026-15193

Name of the Vulnerable Software and Affected Versions AidanPark openclaw-android versions prior to 0.4.1

Description An OS command injection issue exists within the Android WebView Bridge component, specifically in an unknown function located in the android/app/src/main/java/com/openclaw/android/JsBridge.kt file. This flaw allows for the execution of arbitrary operating system commands, although the attack can only be performed locally.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.