WhatsApp-to-Host Attack Chain Using Three OpenClaw Flaws
Key Questions
What vulnerabilities were discovered in OpenClaw?
Three high-severity flaws (CVSS 8.4-8.8) were found that together enable a WhatsApp-to-host attack chain involving credential theft, privilege escalation, and remote code execution.
How does the WhatsApp attack chain exploit OpenClaw?
A single WhatsApp message can trigger host code execution by exploiting a parent directory bypass on bind mounts, allowing attackers to read SSH keys and gain access.
What action is recommended for OpenClaw users?
Users should urgently patch to v2026.6.6 and apply the concrete hardening advice provided for both self-hosters and enterprise teams.
Three new OpenClaw flaws (CVSS 8.4-8.8) enable WhatsApp-to-host attack chain — credential theft, privilege escalation, RCE. Patched in v2026.6.6. Parent directory bypass on bind mounts (mount /home, read SSH keys). Concrete hardening advice for self-hosters and enterprise teams. Urgent patching recommended.