PT-2026-5584

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.1.29 Description OpenClaw also known as ClawdBot or MoltBot contains a critical security flaw due to the lack of proper validation of incoming requests. The software obtains a gatewayUrl value from a query strin...

Clawdbot’s rename to Moltbot sparks impersonation campaign

After the viral AI assistant Clawdbot was forced to rename to Moltbot due to a trademark dispute, opportunists moved quickly. Within days, typosquat domains and a cloned GitHub repository appeared—impersonating the project’s creator and positioning infrastructure for a potential supply-chain...

OpenClaw AI Assistant Installed

The OpenClaw AI assistant is installed on the remote host. Note that enabling the 'Perform thorough tests' setting will search the file system for the product. %NASLMINLEVEL 80900 C Tenable, Inc. include"compat.inc"; if description scriptid297108; scriptversion"1.3";...

Fake Moltbot AI Coding Assistant on VS Code Marketplace Drops Malware

Cybersecurity researchers have flagged a new malicious Microsoft Visual Studio Code VS Code extension for Moltbot formerly Clawdbot on the official Extension Marketplace that claims to be a free artificial intelligence AI coding assistant, but stealthily drops a malicious payload on compromised...