#ai-security-vulnerability

[ follow ]
#openclaw #localhost-exploitation #password-brute-force #websocket-security #openclaw-clawjacked
Information security
fromSecurityWeek
2 hours ago

OpenClaw Vulnerability Allowed Websites to Hijack AI Agents

OpenClaw AI assistant vulnerability allowed attackers to hijack agents through malicious websites by exploiting localhost assumptions and rate limiter exemptions for loopback connections.
Information security
fromTechzine Global
4 hours ago

Flaw in OpenClaw allows complete takeover of AI agent

A critical vulnerability in OpenClaw allowed arbitrary websites to hijack AI assistants through localhost WebSocket connections without user interaction or malicious plugins.
[ Load more ]