{"id":288059,"date":"2026-07-10T10:19:00","date_gmt":"2026-07-10T14:19:00","guid":{"rendered":"https:\/\/news-you-need.com\/index.php\/2026\/07\/10\/researcher-details-whatsapp-to-host-attack-chain-using-three-openclaw-flaws\/"},"modified":"2026-07-10T14:55:08","modified_gmt":"2026-07-10T18:55:08","slug":"researcher-details-whatsapp-to-host-attack-chain-using-three-openclaw-flaws","status":"publish","type":"post","link":"https:\/\/news-you-need.com\/index.php\/2026\/07\/10\/researcher-details-whatsapp-to-host-attack-chain-using-three-openclaw-flaws\/","title":{"rendered":"Researcher Details WhatsApp-to-Host Attack Chain Using Three OpenClaw Flaws"},"content":{"rendered":"<p><a href=\"https:\/\/thehackernews.com\/2026\/07\/researcher-details-whatsapp-to-host.html\">Researcher Details WhatsApp-to-Host Attack Chain Using Three OpenClaw Flaws<\/a><\/p>\n<p><a href=\"https:\/\/thehackernews.com\/2026\/07\/researcher-details-whatsapp-to-host.html\">https:\/\/thehackernews.com\/2026\/07\/researcher-details-whatsapp-to-host.html<\/a><\/p>\n<p>Publish Date: <a href=\"publish_date]\">2026-07-10 10:19:00<\/a><\/p>\n<p>Source Domain: <a href=\"thehackernews.com\">thehackernews.com<\/a><\/p>\n<p><span class=\"p-author\">\ue804<span class=\"author\">Ravie Lakshmanan<\/span>\ue802<span class=\"author\">Jul 10, 2026<\/span><\/span><span class=\"p-tags\">AI Security \/ Vulnerability<\/span><\/p>\n<p>Details have emerged about three now-patched security flaws in the OpenClaw personal artificial intelligence (AI) assistant that, if successfully exploited, could enable credential theft, privilege escalation, and arbitrary code execution on the host.<\/p>\n<p>A brief description of the high-severity vulnerabilities is as follows\u00a0&#8211;<\/p>\n<ul>\n<li><strong>GHSA-hjr6-g723-hmfm<\/strong> (CVSS score: 8.8) &#8211; An operating system command injection and an incomplete list of disallowed inputs vulnerability impacting the host execution environment filtering mechanism that could allow for executing or persist actions beyond the caller&#8217;s intended authorization.<\/li>\n<li><strong>GHSA-9969-8g9h-rxwm<\/strong> (CVSS score: 8.8) &#8211; An operating system command injection and an incomplete list of disallowed inputs vulnerability impacting the host execution environment filtering mechanism that could allow for executing or persist actions beyond the caller&#8217;s intended authorization.<\/li>\n<li><strong>GHSA-575v-8hfq-m3mc<\/strong> (CVSS score: 8.4) &#8211; A path traversal and link following vulnerability that could allow sandbox bind mounts to bypass parent-directory denylist checks and perform actions that should have been secured with stronger authorization or policy checks.<\/li>\n<\/ul>\n<p>All three shortcomings have been addressed in OpenClaw version 2026.6.6.<\/p>\n<p><img decoding=\"async\" alt=\"\" border=\"0\" data-original-height=\"310\" data-original-width=\"1400\" src=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEg7pp31YSx7YW04s7vxzEYFYsk_y-4ncrMNOtkTw28tuuYW4vjWPb7P9mAe1Ubpa1OPfMIe-nIE6QxtkBjL4J4gvNFanwEZhtdtDuOApElzQf863NGWbHs6CKe6elnjDZXDKA0jiWQfjDoPYamSHzrfpcy11qEMoIbR6iDsq4hAf2REYGHRZYIiZQ1TgF39\/s1600\/open.jpg\"\/><\/p>\n<p>In a series of advisories released last week, OpenClaw maintainers said &#8220;practical impact depends on the operator&#8217;s configuration and whether lower-trust input can reach that path.&#8221;<\/p>\n<p>However, security researcher Chinmohan Nayak, who is credited with discovering and reporting the issues, said in a report shared with The Hacker News that they can be used to trigger host code execution from an external message sent via WhatsApp.<\/p>\n<p><img decoding=\"async\" alt=\"\" border=\"0\" data-original-height=\"639\" data-original-width=\"720\" src=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEju3jGYADeL_1dA8qwtLpzzGKgBpklCfIGmjeMoJlxtlSMdez1q7uss-H9gaBSiqYtSHQjOCbKLifZxOe6GCWnueNFLZKR6pyYKfkc7kZWWQQXm_E7Wi9IH2E-SfActpcfBBZm_-aX4pVUmKslXQIZ1z4hwq8WX0JFdMxcFVRNAll_-n6Fj0a1Fi9MKMkK5\/s1600\/whatsapp-ai.jpg\"\/><\/p>\n<p>Unlike the Claw Chain vulnerabilities disclosed by Cyera back in May, the newly identified bugs do not require an attacker to establish a prior foothold in order to extract sensitive data, drop a persistent backdoor, obtain arbitrary remote&#8230;<\/p>\n<p><a href=\"https:\/\/thehackernews.com\/2026\/07\/researcher-details-whatsapp-to-host.html\">Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Researcher Details WhatsApp-to-Host Attack Chain Using Three OpenClaw Flaws https:\/\/thehackernews.com\/2026\/07\/researcher-details-whatsapp-to-host.html Publish Date: 2026-07-10 10:19:00 Source&#8230;<\/p>\n","protected":false},"author":1,"featured_media":288060,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEgs80_SEcGa8Q18LOUd4Y3fWiWZRh6MOX6U3LhAyAVVewqJVSd1cq2bgepE_2vS0eg9qvr0iM1JOYnYd9GPDQ-LZiTP4-J8oEpZjAMc2ivQ9QiNTMbf1BYONSvBOvZaVat_1PUWjM9O72K_pdF74UKhHm-dd-wXKLp8BDoV4dQZTi1HWOUCWbozpd4muH0i\/s1600\/openclaw-whatsapp.jpg","fifu_image_alt":"","footnotes":""},"categories":[15],"tags":[26,20,35,27],"class_list":["post-288059","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-ai","tag-artificial-intelligence","tag-hacker","tag-vulnerability"],"_links":{"self":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/288059"}],"collection":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/comments?post=288059"}],"version-history":[{"count":1,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/288059\/revisions"}],"predecessor-version":[{"id":288061,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/288059\/revisions\/288061"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media\/288060"}],"wp:attachment":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media?parent=288059"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/categories?post=288059"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/tags?post=288059"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}