CVE-2026-66418

OpenClaw Dashboard v3.0.0 contains a stored cross-site scripting vulnerability (CWE-79) that lets an unauthenticated remote attacker inject arbitrary HTML and script through the username field of a failed login POST request. The injected value is stored verbatim in the audit log and later rendered unescaped via innerHTML in the administrator's notification panel, where a permissive Content-Security-Policy permits inline event handlers, so the payload executes when an administrator opens the panel. Because the script runs in the administrator's session, the attacker can invoke authenticated endpoints — including editing agent instruction files and changing configuration — and, per the public proof-of-concept, achieve administrator account takeover. Anyone running OpenClaw Dashboard v3.0.0 whose login and notification panel are reachable to unauthenticated users is affected. The flaw is not yet in CISA's KEV and EPSS assigns roughly a 0.5% probability of exploitation within 30 days (42nd percentile), but two public proof-of-concept references are available, so opportunistic exploitation is plausible.

What to do: Upgrade from v3.0.0 to a patched release as soon as the vendor publishes one (no fixed version is named in the disclosure); in the meantime, restrict the dashboard login page and notification panel to trusted networks or IP allowlists. Review stored audit-log entries for injected HTML/script content, and check whether agent instruction files or configuration were modified through any admin sessions. Defensively, ensure log fields are HTML-escaped before rendering and tighten the CSP to disallow inline event handlers.