{"id":192,"date":"2026-10-29T07:18:14","date_gmt":"2026-10-29T07:18:14","guid":{"rendered":"https:\/\/bugskan.com\/?p=192"},"modified":"2026-10-29T07:18:14","modified_gmt":"2026-10-29T07:18:14","slug":"clawjacked-research-linked-malicious-websites-to-a-local-openclaw-gateway","status":"publish","type":"post","link":"https:\/\/bugskan.com\/index.php\/2026\/10\/29\/clawjacked-research-linked-malicious-websites-to-a-local-openclaw-gateway\/","title":{"rendered":"ClawJacked research linked malicious websites to a local OpenClaw gateway"},"content":{"rendered":"<p>Oasis Security\u2019s ClawJacked disclosure describes a malicious website connecting to an OpenClaw gateway running on the visitor\u2019s machine. The chain combined local WebSocket access, password-guessing behavior and device trust to obtain agent control.<\/p>\n<p>This is distinct from the earlier gateway-URL token leak. A local listening address alone did not establish a sufficient boundary against content running in the user\u2019s browser.<\/p>\n<p>Oasis says OpenClaw fixed the issue quickly and directs users to 2026.2.25 or later. Use a maintained release, review gateway authentication and investigate unfamiliar paired devices. The demonstration does not establish a population of compromised users.<\/p>\n<p><a href=\"https:\/\/www.oasis.security\/blog\/openclaw-vulnerability\">Read the original source<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Oasis demonstrated a website-to-agent takeover chain involving local WebSocket access and gateway authentication behavior.<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"bugskan_incident_id":"inc_dface800a4bfbf","bugskan_event_type":"vulnerability","bugskan_response":"REVIEW","bugskan_technical_severity":"","bugskan_technical_severity_source":"","bugskan_evidence_quality":"high","bugskan_affected_scope":"The local gateway chain demonstrated by Oasis Security.","bugskan_recommended_next_step":"Update OpenClaw and review gateway authentication and paired-device records.","bugskan_who_should_check":"","bugskan_material_updated_at":"2026-02-26T00:00:00Z","bugskan_reviewer_name":"","bugskan_reviewed_at":"","bugskan_legacy_state":"mapped","bugskan_featured":false,"bugskan_sample":false,"footnotes":""},"categories":[1],"tags":[],"bugskan_format":[2],"bugskan_technology":[46],"class_list":["post-192","post","type-post","status-publish","format-standard","hentry","category-uncategorized","bugskan_format-security-brief","bugskan_technology-openclaw"],"_links":{"self":[{"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/posts\/192","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/comments?post=192"}],"version-history":[{"count":1,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/posts\/192\/revisions"}],"predecessor-version":[{"id":376,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/posts\/192\/revisions\/376"}],"wp:attachment":[{"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/media?parent=192"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/categories?post=192"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/tags?post=192"},{"taxonomy":"bugskan_format","embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/bugskan_format?post=192"},{"taxonomy":"bugskan_technology","embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/bugskan_technology?post=192"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}