Skip to content
Threat Feed
Subscribe

Tag

Webview

1 brief RSS
high advisory

OpenClaw Android App Vulnerable to Arbitrary Code Execution via WebView JavascriptInterface

The openclaw npm package before version 2026.3.22 is vulnerable to arbitrary code execution, where an attacker could inject instructions into the app by invoking the JavascriptInterface bridge from untrusted origins within Android Canvas WebView pages.

OpenClaw Android application android webview rce
2r 1t