HighVulnerability
GHSA-cxmw-p77q-wchg: OpenClaw: Arbitrary code execution via unvalidated WebView JavascriptInterface
- Identifier
- GHSA-cxmw-p77q-wchg
- Published
- Record updated
- Affected
- openclaw < 2026.3.22
- Fixed in
- 2026.3.22
- released March 23, 2026, 3 days before disclosure
Summary
OpenClaw's Android Canvas WebView accepted calls to its JavascriptInterface bridge from pages on untrusted origins, letting such pages inject instructions into the app. The affected npm package `openclaw` is any version below 2026.3.22, and the flaw is fixed in 2026.3.22 and later.
Mitigation
Fixed in 2026.3.22 (commit 8b02ef133275be96d8aac2283100016c8a7f32e5). The fix snapshots page origin in apps/android/app/src/main/java/ai/openclaw/app/ui/CanvasScreen.kt and rejects untrusted bridge calls, with trusted origin and path validation centralized in apps/android/app/src/main/java/ai/openclaw/app/node/CanvasActionTrust.kt.
Related items
- MediumRecent AI agent experiments reveal a risky future of machine 'teamwork' inside corporationsSimilar attack · CNBC Technology
- MediumClaude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHubSimilar attack · The Hacker News
- MediumCVE-2026-118046: JS Help Desk plugin stored DOM-based cross-site scripting via jsticket_messageSimilar attack · NVD/CVE Database
- MediumARTEX abuse expands as cybercriminals target financial sectorSimilar attack · Microsoft Security Blog
- MediumCVE-2026-102610: fast-agent serve unauthenticated remote command execution via /mcp endpointSimilar attack · NVD/CVE Database