---
id: CVE-2026-95815
title: >-
  OpenClaw iOS before 2026.8.11 logs complete agent deep-link URLs including
  persistent bearer keys to unified logs as public diagnostic data
summary: >-
  OpenClaw iOS before 2026.8.11 logs complete agent deep-link URLs including
  persistent bearer keys to unified logs as public diagnostic data. Attackers
  who obtain diagnostic archives can recover unrotated keys and replay them in
  forged de…
severity: medium
cvss: 6.3
cvssVector: 'CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N'
cwe:
  - CWE-532
vendor: OpenClaw
product: OpenClaw iOS
affected:
  - ios < 2026.8.11
published: '2026-09-22'
updated: '2026-09-24'
sourceUpdated: '2026-09-24T21:08:55.030'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-95815'
references:
  - url: 'https://github.com/openclaw/openclaw'
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/openclaw/openclaw/blob/935c16b5e22fae3c7ff5fdee0b834d5e0077d1f6/apps/ios/Sources/Model/NodeAppModel.swift#L10037-L10038
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/openclaw/openclaw/commit/8361f3704dd5e151ff1325e62ff5de658b6c62e6
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/openclaw/openclaw/security/advisories/GHSA-5j57-84cx-r295
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/openclaw-ios-before-2026.8.11-credential-exposure-via-deep-link-url-logging
    label: disclosure@vulncheck.com
tags:
  - nvd
  - cve.org
epss: 0.0016
epssPercentile: 0.0437
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-09-23T14:31:03.572758Z'
ingestedAt: '2026-09-22T21:11:40.325Z'
---

## Overview

OpenClaw iOS before 2026.8.11 logs complete agent deep-link URLs including persistent bearer keys to unified logs as public diagnostic data. Attackers who obtain diagnostic archives can recover unrotated keys and replay them in forged deep links to submit agent requests without local confirmation prompts.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.