The vulnerability arises from the Exported Session HTML feature in OpenClaw, which allows unsafe javascript: and data: links to be preserved in the generated content. When a trusted operator opens the exported file in a web browser and activates any of these links, malicious scripts can run under the operator’s credentials. The flaw is a typical XSS bug, classified as CWE‑83, and can compromise the confidentiality and integrity of the users’ data within the browser context, but does not provide a direct remote code execution pathway.

OpenClaw instances running before version 2026.5.12 are affected. The issue applies to all installations that use the exported session HTML functionality.

With a CVSS score of 2.1, the severity is low, and an EPSS score of less than 1% indicates a very low probability of exploitation in the wild. The vulnerability is not listed in the CISA KEV catalog, and no public exploit is known. The likely attack vector requires internal access to the system and trust that an operator will open the malicious exported file, so the risk is limited to environments where exported files are shared among trusted users.