What happened
NVD published both CVEs (CVSS 9.3, Critical) on 2026-07-30, describing stored XSS vectors in OpenClaw Dashboard's audit logging and agent-session transcript viewing features that lead to administrator session token theft.
Why it matters
This targets the administrative control plane for an AI agent management dashboard — successful exploitation grants attackers administrator-level control over the platform that supervises AI agent operations, though the attack requires an administrator to view the poisoned log/transcript, somewhat narrowing immediate blast radius versus direct agent takeover.
Attack vector
CVE-2026-66418: an unauthenticated attacker submits a crafted username in a failed login POST request, which is recorded verbatim in the audit log and executes when an administrator views it, enabling session token theft. CVE-2026-66421: HTML/JS injected into agent transcript messages processed through the sessions API executes in the administrator's browser when viewing agent session transcripts.
Affected systems
OpenClaw Dashboard v3.0.0
Mitigation
Sanitize audit log rendering and agent transcript message rendering; apply vendor patch when available (no version fix confirmed in the seed).