The vulnerabilities in the src/browser/routes/agent.act.ts and src/browser/pw-tools-core.interactions.ts files of the AI agent OpenClaw (formerly ClawdBot or MoltBot) allow a violator to execute arbitrary commands.

The vulnerability in the src/browser/routes/agent.act.ts and src/browser/pw-tools-core.interactions.ts files of the AI agent OpenClaw formerly ClawdBot or MoltBot is related to the lack of authentication for a critical function. Exploiting this vulnerability allows an attacker to execute arbitrar...