AI Threat Alert

CVE-2026-95815

MEDIUM
Published September 22, 2026

OpenClaw iOS before 2026.8.11 logs complete agent deep-link URLs including persistent bearer keys to unified logs as public diagnostic data. Attackers who obtain diagnostic archives can recover unrotated keys and replay them in forged deep links to submit agent requests without local confirmation...

Full CISO analysis pending enrichment.

How severe is it?

CVSS 3.1
6.3 / 10
EPSS
N/A
Exploitation Status
No known exploitation
Sophistication
N/A

What is the attack surface?

AV AC PR UI S C I A
AV Local
AC High
PR None
UI Required
S Unchanged
C High
I High
A None

What should I do?

No patch available

Monitor for updates. Consider compensating controls or temporary mitigations.

Which compliance frameworks are affected?

Compliance analysis pending. Sign in for full compliance mapping when available.

Frequently Asked Questions

What is CVE-2026-95815?

OpenClaw iOS before 2026.8.11 logs complete agent deep-link URLs including persistent bearer keys to unified logs as public diagnostic data. Attackers who obtain diagnostic archives can recover unrotated keys and replay them in forged deep links to submit agent requests without local confirmation prompts.

Is CVE-2026-95815 actively exploited?

No confirmed active exploitation of CVE-2026-95815 has been reported, but organizations should still patch proactively.

How to fix CVE-2026-95815?

No patch is currently available. Monitor vendor advisories for updates.

What is the CVSS score for CVE-2026-95815?

CVE-2026-95815 has a CVSS v3.1 base score of 6.3 (MEDIUM).

What are the technical details?

Original Advisory

OpenClaw iOS before 2026.8.11 logs complete agent deep-link URLs including persistent bearer keys to unified logs as public diagnostic data. Attackers who obtain diagnostic archives can recover unrotated keys and replay them in forged deep links to submit agent requests without local confirmation prompts.

Weaknesses (CWE)

CWE-532 Insertion of Sensitive Information into Log File Primary

CWE-532 — Insertion of Sensitive Information into Log File: The product writes sensitive information to a log file.

  • [Architecture and Design, Implementation] Consider seriously the sensitivity of the information written into log files. Do not write secrets into the log files.
  • [Distribution] Remove debug log files before deploying the application into production.

Source: MITRE CWE corpus.

CVSS Vector

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

References

Timeline

Published
September 22, 2026
Last Modified
September 22, 2026
First Seen
September 22, 2026
Back to Threat Feed