Security brief

ClawJacked research linked malicious websites to a local OpenClaw gateway

REVIEW

Oasis demonstrated a website-to-agent takeover chain involving local WebSocket access and gateway authentication behavior.

Published 29 Oct 2026 · Material update 26 Feb 2026 — last time the underlying evidence changed · Evidence: high

What happened

Oasis Security’s ClawJacked disclosure describes a malicious website connecting to an OpenClaw gateway running on the visitor’s machine. The chain combined local WebSocket access, password-guessing behavior and device trust to obtain agent control.

This is distinct from the earlier gateway-URL token leak. A local listening address alone did not establish a sufficient boundary against content running in the user’s browser.

Oasis says OpenClaw fixed the issue quickly and directs users to 2026.2.25 or later. Use a maintained release, review gateway authentication and investigate unfamiliar paired devices. The demonstration does not establish a population of compromised users.

Read the original source.

Next step

Update OpenClaw and review gateway authentication and paired-device records.

What remains unknown

Open question
The sources reviewed do not establish whether your deployment was exploited.

Source references