The vulnerability of the WebSocket-server of the Gateway AI-agent OpenClaw (formerly known as ClawdBot or MoltBot) allows a perpetrator to execute arbitrary code.

The vulnerability of the WebSocket-server of the OpenClaw AI agent formerly known as ClawdBot or MoltBot is related to an uncontrolled element in the search path. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Anatomy of an Autonomous AI Agent Risk: How Qualys ETM Connects the Dots on OpenClaw

Executive Summary An unauthorized OpenClaw AI agent was detected disguised as a routine package on a Windows Server host. The situation escalated into a priority incident when Qualys ETM analyzed and correlated four distinct signals. While none of these signals alone warranted urgent action, the...

The vulnerability of the AI agent OpenClaw (formerly known as ClawdBot or MoltBot) in Windows operating systems arises from the failure to take measures to neutralize special elements. This vulnerability allows a perpetrator to execute arbitrary commands.

The vulnerability of the AI agent OpenClaw formerly known as ClawdBot or MoltBot in Windows operating systems is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a hacker to execute arbitrary commands...

The vulnerability of the collectConfigEnvVars() function in the OpenClaw AI agent (previously known as ClawdBot or MoltBot) allows a violator to execute arbitrary code.

The vulnerability of the collectConfigEnvVars function in the OpenClaw AI agent previously known as ClawdBot or MoltBot is related to errors in system configuration or settings. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...