{"vulnerability": "CVE-2026-66421", "sightings": [{"uuid": "9c14c74c-7cbe-4973-9dea-1fcccba934d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66421", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96347", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #XSS #CVE #Stored\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-66421-OpenClaw-Dashboard-Stored-XSS-via-lastMessage-Session-Field\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a theopaid\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-02 22:17:23\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nSecurity Advisory: Stored Cross-Site Scripting Via Agent Messages Leading To Session Token Theft (openclaw-dashboard)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-03T01:19:36.835924Z"}, {"uuid": "974710aa-d6ad-41e4-9234-0ad8757a9ecc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66421", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrvk677xxf2y", "content": "CVE-2026-66421 - openclaw-dashboard\nThe OpenClaw Dashboard software has a security flaw that lets hackers inject malicious code into a website, potentially stealing sensitive information\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#openclawdashboard #tugcantopaloglu #CVE #infosec", "creation_timestamp": "2026-07-30T23:00:05.126040Z"}, {"uuid": "ef64fae1-f8de-4a46-bf0d-15f387d05368", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66421", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrvqw2elck2a", "content": "\ud83d\udd34 CVE-2026-66421 - Critical (9.3)\n\nOpenClaw Dashboard contains a stored cross-site scripting vulnerability that allows unauthenticat...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-66421/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-31T01:00:48.262051Z"}, {"uuid": "18445a17-4973-418b-9293-5008ced835cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66421", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrwy7mbq5t2y", "content": "CVE-2026-66421\nThe OpenClaw Dashboard is vulnerable to a type of cyber attack that allows hackers to inject malicious code into the admin's browser session. This can lead to unauthorized access to sensitive areas of the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-31T12:44:04.731613Z"}]}