OpenClaw Remote Code Execution Vulnerability

A vulnerability in the OpenClaw AI assistant allowed malicious websites to establish WebSocket connections to the local gateway, bypassing cross-origin policies and rate limits. This enabled attackers to brute-force local passwords, gain administrator privileges, and achieve full control over the AI agent and connected developer workstation.

What Happened

A vulnerability in the OpenClaw AI assistant allowed malicious websites to establish WebSocket connections to the local gateway, bypassing cross-origin policies and rate limits. This enabled attackers to brute-force local passwords, gain administrator privileges, and achieve full control over the AI agent and connected developer workstation.

Why This Matters

Publisher reporting describes a security event affecting OpenClaw. BugSkan could not yet bind a CVE or affected version, so treat the source details as the current record.

Recommended Action

Confirm whether OpenClaw is present in your environment and review vendor guidance for this report. Apply available patches or mitigations if your deployment matches the described conditions.

Exposure

Exposure reason: This incident does not currently match a technology in My Interests.

Exploitation status: UNKNOWN

Primary entities:

Timeline

• Incident first seen
  Mar 02, 2026 05:30

  BugSkan first recorded this incident.

• OpenClaw Vulnerability Allowed Websites to Hijack AI Agents - SecurityWeek
  Mar 02, 2026 05:30

  securityweek.com · Vulnerability

Sources

My Interests Match