Vulnerabilities
CVE-2026-25253 - OpenClaw WebSocket Token Disclosure Vulnerability
CVE ID : CVE-2026-25253 Published : Feb. 1, 2026, 11:15 p.m. | 38 minutes ago Description : OpenClaw (aka clawdbot or Moltbot) before 2026.1.29 obtains a gatewayUrl value from a query string and automatically makes a WebSocket connection without prompting, sending a token value. Severity: 8.8 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...