Details have emerged about three now-patched security flaws in the OpenClaw personal artificial intelligence (AI) assistant that, if successfully exploited, could enable credential theft, privilege escalation, and arbitrary code execution on the host.

A brief description of the high-severity vulnerabilities is as follows -


GHSA-hjr6-g723-hmfm (CVSS score: 8.8) - An operating system



Source: TheHackerNews
Source Link: https://thehackernews.com/2026/07/researcher-details-whatsapp-to-host.html