PT-2026-5584 · Openclaw · Openclaw

0Xacb + 2 · Published 2026-01-31 · Updated 2026-07-04 · CVE-2026-25253

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.1.29

Description OpenClaw contains a critical authentication bypass and server-side request forgery (SSRF) flaw in its WebSocket gateway. The issue occurs because the software fails to validate the gatewayUrl parameter provided in a query string before initializing a WebSocket connection. This allows a remote attacker to trick the system into sending authentication bearer tokens to an attacker-controlled endpoint via a specially crafted URL.

Exploitation of this flaw can lead to the theft of bot bearer tokens, unauthorized access to internal network services, and the theft of cloud metadata and IAM credentials (e.g., from 169.254.169.254). In some scenarios, this can result in full remote code execution (RCE) and complete compromise of connected automation workflows, databases, and cloud infrastructure. It is reported that over 135,000 instances remained exposed on public IPs after the vulnerability became known.

Recommendations Upgrade to OpenClaw version 2026.1.29 or later. Restrict external access to OpenClaw dashboard endpoints. Deploy WAF rules to block malicious gatewayUrl values. Enforce strict egress filtering on the network. Rotate all exposed credentials and bot tokens.

Exploit

Fix

LPE

RCE

Exposure of Resource to Wrong Sphere

Weakness Enumeration

CWE-668

CWE-669

Related Identifiers

BDU:2026-01840

CVE-2026-25253

GHSA-G8P2-7WF7-98MQ

GHSA-R2C6-8JC8-G32W

Affected Products

Openclaw

References · 418

• 🔥 https://depthfirst.com/post/1-click-rce-to-steal-your-moltbot-data-and-keys · Exploit
• 🔥 https://ethiack.com/news/blog/one-click-rce-moltbot · Exploit
• 🔥 https://x.com/0xacb/status/2016913750557651228 · Exploit
• https://github.com/openclaw/openclaw/security/advisories/GHSA-g8p2-7wf7-98mq · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-r2c6-8jc8-g32w · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-01840 · Security Note
• https://osv.dev/vulnerability/GHSA-g8p2-7wf7-98mq · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-25253 · Security Note
• https://osv.dev/vulnerability/CVE-2026-25253 · Vendor Advisory
• https://github.com/openclaw/openclaw · Note
• https://github.com/adibirzu/openclaw-security-monitor · Note
• https://t.me/brutsecurity/2530 · Telegram Post
• https://twitter.com/carloxthebot/status/2038262657887707317 · Twitter Post
• https://twitter.com/thedatabunny/status/2038633039115231363 · Twitter Post
• https://reddit.com/r/better_claw/comments/1sl7t1w/if_you_came_from_tiktok_and_just_installed · Reddit Post