OpenClaw for iOS fails to enforce stored Gateway TLS fingerprint when rendering the Control UI. An attacker who can redirect traffic to the same host and port can present a different certificate that the iOS system trusts and serve a counterfeit Control UI page. When the user opens Terminal or a session Dashboard, the injected page can read the stored Gateway token or password. With the stolen credential an attacker may gain operator access, which includes reading sensitive Gateway state and invoking host‑capable tools.

OpenClaw iOS client, versions starting at 2026.7.1 up to but not including 2026.8.11. The affected product is the OpenClaw application distributed for iOS devices.

The CVSS score is 9.0, indicating a high severity that allows credential theft and privileged access. The EPSS score is not available, so the exploitation probability is unknown, but the lack of a KEV listing does not reduce the risk. The vulnerability requires an attacker to control the network path to the gateway and use a certificate acceptable to the operating system; this is a feasible attack vector in many environments. Until patched, the risk remains high and any device running the affected OpenClaw version is vulnerable.