CVE-2026-25253
High · 8.8CVSS
8.8
EPSS
24.4%
Published
Feb 1, 2026
CISA due date
—
The record
OpenClaw (aka clawdbot or Moltbot) before 2026.1.29 obtains a gatewayUrl value from a query string and automatically makes a WebSocket connection without prompting, sending a token value.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | clawdbot | 0 | 2026.1.29 |
Related vulnerabilities
- GHSA-g8p2-7wf7-98mq OpenClaw/Clawdbot has 1-Click RCE via Authentication Token Exfiltration From gatewayUrl Same vulnerability
- CVE-2026-29612 OpenClaw versions prior to 2026.2.14 decode base64-backed media inputs into buffers… Also affects clawdbot
- CVE-2026-28480 OpenClaw versions prior to 2026.2.14 contain an authorization bypass vulnerability where… Also affects clawdbot
- CVE-2026-28478 OpenClaw versions prior to 2026.2.13 contain a denial of service vulnerability in webhook… Also affects clawdbot
- CVE-2026-28469 OpenClaw versions prior to 2026.2.14 contain a webhook routing vulnerability in the… Also affects clawdbot
- CVE-2026-28452 OpenClaw versions prior to 2026.2.14 contain a denial of service vulnerability in the… Also affects clawdbot
- CVE-2026-26328 OpenClaw is a personal AI assistant. Also affects clawdbot
- CVE-2026-26317 OpenClaw is a personal AI assistant. Also affects clawdbot