Vulnerability / research

ClawJacked let a website take over a local OpenClaw agent

Reported

What happened

Oasis demonstrated a website-to-local-agent attack combining WebSocket access, unthrottled password guessing, and automatic device pairing against an OpenClaw gateway.

Parties and reporting

AI tools and systems: OpenClaw, WebSocket

Outcome

Oasis reported a fix within 24 hours and directed users to OpenClaw 2026.2.25 or later.

Operating lesson

Authenticate and rate-limit local services, validate browser origins, and require deliberate device pairing.

Evidence and limits

Lab demonstration requiring a running password-protected gateway and a guessable password; no compromised user population is established.

Sources