Home / Technology / AI Agent Vulnerable: Upgrade Now!
AI Agent Vulnerable: Upgrade Now!
4 Mar
Summary
- AI agent OpenClaw had a high-severity security flaw.
- Attackers could brute-force passwords via malicious websites.
- The vulnerability was patched within 24 hours.
Security researchers recently identified a high-severity vulnerability in the widely-used OpenClaw AI agent platform. The exploit allowed malicious websites to bypass local gateway authentication, potentially leading to unauthorized access and data theft.
This flaw resided within the core system of OpenClaw, an AI agent that connects to user calendars, messaging apps, and can manage tasks like scheduling. According to the researchers, a malicious website could exploit a WebSocket server within OpenClaw to brute-force its password. Once authenticated, attackers gained complete control over the AI agent's functions.
Oasis, the security firm that discovered the vulnerability, reported it responsibly. The OpenClaw developers responded swiftly, deploying a patch within 24 hours of disclosure. Users are now urged to upgrade to version 2026.2.25 or a later version to protect against this security threat.
