CVE-2026-53841: OpenClaw cross-site scripting in exported session HTML

Executive brief

OpenClaw, an AI assistant platform, contains a vulnerability where exported session files may include malicious links. If a user exports a session and later opens that file in a web browser, clicking a compromised link could allow an attacker to execute unauthorized scripts. This could lead to the theft of sensitive information or unauthorized actions within the user's browser session.

Technical details

A Cross-Site Scripting (XSS) vulnerability (CWE-79) exists in OpenClaw due to improper neutralization of markdown links during the HTML export process. The application fails to strip 'javascript:' or 'data:' URI schemes from links rendered into the exported session HTML. An attacker can exploit this by providing malicious input that is subsequently included in an exported session; if a trusted operator opens this HTML file and interacts with the link, arbitrary browser-side scripts can execute. The vulnerability is patched in version 2026.5.12.

Affected products

• openclaw openclaw <= 2026.5.7

Timeline

• 2026-05-28: disclosed
• 2026-06-18: advisory: GitHub Advisory published
• 2026-05-12: patched

References

• https://api.github.com/users/YLChen-007
• https://github.com/YLChen-007
• https://api.github.com/users/YLChen-007/gists%7B/gist_id%7D
• https://api.github.com/users/YLChen-007/repos
• https://avatars.githubusercontent.com/u/30854794?v=4
• https://api.github.com/users/YLChen-007/events%7B/privacy%7D