Technology
OpenClaw
-
REVIEW
OpenClaw log-poisoning advisory depends on how an assistant later reads the logs
The maintainer rates this issue Low, with a fix in 2026.2.13; it is not a direct, universal code-execution flaw.
-
REVIEW
ClawJacked research linked malicious websites to a local OpenClaw gateway
Oasis demonstrated a website-to-agent takeover chain involving local WebSocket access and gateway authentication behavior.
-
Bitsight’s OpenClaw scan measured exposure, not tens of thousands of proven breaches
The February 2026 analysis found more than 30,000 observable instances during its measurement window.
-
REVIEW
OpenClaw gateway-link flaw could expose tokens even on loopback-only deployments
CVE-2026-25253 involved an automatic WebSocket connection to an attacker-selected gateway URL.
-
Moltbot security review asks what happens when a personal agent holds all the keys
OX Security’s review concerns the project now called OpenClaw and the permissions users give a persistent assistant.