AI Security Incident
Evidence indicates that the affected technology is affected by a security issue.
What Happened
Evidence indicates that the affected technology is affected by a security issue.
Why This Matters
Current evidence identifies a security issue involving Hijack AI Agents, but does not yet support a more specific impact claim.
Recommended Action
No confirmed vendor remediation is available in the current evidence. Confirm whether Hijack AI Agents is present in your environment and review the affected configuration.
Exposure
Mar 02, 2026 05:30
Mar 02, 2026 05:30
Exploitation status: UNKNOWN
Primary entities:
Timeline
-
Incident first seen
Mar 02, 2026 05:30BugSkan first recorded this incident.
-
OpenClaw Vulnerability Allowed Websites to Hijack AI Agents - SecurityWeek
Mar 02, 2026 05:30securityweek.com · Vulnerability
Sources
securityweek.com · Mar 02, 2026 05:30
A vulnerability in the OpenClaw AI assistant allowed malicious websites to establish WebSocket connections to the local gateway, bypassing cross-origin policies and rate limits. This enabled attackers to brute-force local passwords, gain administrator privileges, and achieve full control over the AI agent and connected developer workstation.
Open publisher sourceWatchlist Match
Create an account to see which incidents overlap with the technologies you monitor.