Last seen February 28, 2026

AI Security Incident

Evidence indicates that the affected technology is affected by a security issue.

Technical Severity
Low severity
Lifecycle Status

STABLE

What Happened

Evidence indicates that the affected technology is affected by a security issue.

Why This Matters

Current evidence identifies a security issue involving Agents, but does not yet support a more specific impact claim.

Recommended Action

No confirmed vendor remediation is available in the current evidence. Confirm whether Agents is present in your environment and review the affected configuration.

Exposure

Recommended Response
First Seen

Feb 28, 2026 05:30

Last Seen

Feb 28, 2026 05:30

Exploitation status: UNKNOWN

Primary entities:

AI Agents Remote Code Execution

Timeline

  • Incident first seen
    Feb 28, 2026 05:30

    BugSkan first recorded this incident.

  • ClawJacked Flaw Lets Malicious Sites Hijack Local OpenClaw AI Agents via WebSocket - The Hacker News
    Feb 28, 2026 05:30

    thehackernews.com · Vulnerability

Sources

ClawJacked Flaw Lets Malicious Sites Hijack Local OpenClaw AI Agents via WebSocket - The Hacker News

thehackernews.com · Feb 28, 2026 05:30

The "ClawJacked" flaw allows malicious websites to hijack locally running OpenClaw AI agents by exploiting a critical vulnerability in the gateway's WebSocket server. This attack leverages a missing rate-limiting mechanism for localhost connections to brute-force passwords and auto-register as a trusted device, granting full control and enabling data exfiltration.

Open publisher source

Watchlist Match

Want personalized relevance?

Create an account to see which incidents overlap with the technologies you monitor.

← Back to incident intelligence