CVE-2026-66421 Details

A stored cross-site scripting vulnerability has been identified in OpenClaw Dashboard versions through 1.1.0. This vulnerability allows unauthenticated remote attackers to execute arbitrary JavaScript in the administrator's browser session. The issue arises from the injection of HTML markup into agent transcript messages, which are processed through the sessions API without proper sanitization. Attackers can exploit this by crafting messages that include inline event handler payloads, such as an image tag with an onerror attribute, within a 60-character limit. Once injected, the malicious script is executed when the administrator views the sessions page, leading to the theft of session tokens and unauthorized access to authenticated administrative endpoints, including modification of agent instruction files.

HTML-encode the 'lastMessage', 'label', and 'key' session fields before inserting them into the HTML. Alternatively, use 'textContent' to set the cell values. Remove 'unsafe-inline' from the Content Security Policy to prevent script execution from injected HTML.