CVE WATCH / VULNERABILITY DETAIL

CVE-2026-100581

MEDIUMCVSS 5.5NVD feed

Published 26 September 2026 · tracked since 26 September 2026

Description

OpenClaw for iOS before 2026.8.11 stores Gateway credentials as cleartext JSON in App Group UserDefaults instead of the device Keychain. Attackers with access to unencrypted device backups or extracted App Group containers can recover valid Gateway tokens and passwords to authenticate with operator

References

Latest tracked vulnerabilities

→ Open the live CVE board · all tools

CVE-2026-100581 — Vulnerability Details | Logic Encoder
CVE WATCH / VULNERABILITY DETAIL

CVE-2026-100581

MEDIUMCVSS 5.5NVD feed

Published 26 September 2026 · tracked since 26 September 2026

Description

OpenClaw for iOS before 2026.8.11 stores Gateway credentials as cleartext JSON in App Group UserDefaults instead of the device Keychain. Attackers with access to unencrypted device backups or extracted App Group containers can recover valid Gateway tokens and passwords to authenticate with operator

References

Latest tracked vulnerabilities

→ Open the live CVE board · all tools

[an error occurred while processing this directive]