“ClawJacked” Vulnerability Allows Malicious Websites to Take Control of OpenClaw

General News
1

Oasis Security discovered a vulnerability in the popular OpenClaw agentic AI software that allows websites to silently bruteforce access to a locally running instance and take it over.

This is a companion discussion topic for the original entry at https://www.privacyguides.org/news/2026/03/02/clawjacked-vulnerability-allows-malicious-websites-to-take-control-of-openclaw
4 Likes
2

Who would have guess that vibe-coded, ultra hyped, completely broken, and insecure garbage software would have security vulnerabilities.

I really understand people/companies who deployed OpenClaw in a production system out of hype. No one would have predicted that this happens.

1 Like