CVE-2026-95815

Name of the Vulnerable Software and Affected Versions OpenClaw iOS versions prior to 2026.8.11

Description The application logs complete agent deep-link URLs, which include persistent bearer keys, to unified logs as public diagnostic data. Bearer keys are security tokens that grant access to a resource without requiring further authentication. An attacker who obtains diagnostic archives can recover these unrotated keys and use them in forged deep links to submit agent requests without triggering local confirmation prompts.

Recommendations Update to version 2026.8.11 or later.