Description (CNA)
OpenClaw for iOS before 2026.8.11 stores Gateway credentials as cleartext JSON in App Group UserDefaults instead of the device Keychain. Attackers with access to unencrypted device backups or extracted App Group containers can recover valid Gateway tokens and passwords to authenticate with operator authority.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| OpenClaw / OpenClaw | affected 0 before 2026.8.11; unaffected 2026.8.11 |
CWE
CWE-312
References
- https://github.com/openclaw/openclaw/security/advisories/GHSA-gcm4-fmcp-2f9r
- https://www.vulncheck.com/advisories/openclaw-ios-before-2026.8.11-credential-storage-via-share-extension
ADP enrichment
No English description supplied.
No references supplied.