OpenClaw Dashboard allows unauthenticated remote attackers to store malicious JavaScript in the session transcript by injecting HTML into the 60‑character lastMessage field. This payload is later rendered unsanitized into innerHTML on the default landing page, enabling attackers to steal session tokens and perform authenticated administrative actions, such as modifying agent instruction files. The vulnerability is a classic stored XSS flaw (CWE‑79).

The affected product is OpenClaw Dashboard developed by tugcantopaloglu. No specific version details are provided, so any deployed instance of the dashboard should be considered potentially vulnerable until a patch is applied.

The CVSS score of 8.8 indicates high severity and the attack can be performed remotely without authentication by submitting a crafted message. The EPSS score of 0.00363 (less than 1%) shows a very low but nonzero probability of exploitation. The issue is not listed in CISA KEV, but the lack of sanitization and the direct abuse of innerHTML makes exploitation straightforward for an attacker who can send an agent transcript. The likelihood is high if the dashboard is exposed to untrusted input sources, and the impact includes session compromise and unauthorized administrative actions.