TLDR Tech / InfoSec
OpenClaw Vulnerability Allowed Websites to Hijack AI Agents
A serious vulnerability in the OpenClaw AI assistant enabled attackers to take control of agents through malicious websites by exploiting unsecured localhost WebSocket connections and unlimited password brute-force attempts, but it has been fixed in version 2026.2.25.
Read the full story