← back | CVE Intelligence

CVE-2026-25253 [High]

Curated 2 security research writeups, vulnerability advisories and exploitation analyses for CVE-2026-25253.

CVSS: 8.8
Coverage Span: 2026-02-01 → 2026-02-03
Reports: 2 related reports

Associated Reports & Timeline

Hunting OpenClaw Exposures: CVE-2026-25253 in Internet-Facing AI Agent Gateways

Hunt.io found over 17,500 exposed OpenClaw, Clawdbot and Moltbot instances vulnerable to CVE-2026-25253, which lets unauthenticated attackers read stored AI-service API tokens via /api/export-auth.

1-Click RCE To Steal Your OpenClaw Data and Keys (CVE-2026-25253)

A 1-click RCE chain against OpenClaw, the open-source AI assistant: a gatewayUrl settings flaw plus a WebSocket pivot turn one malicious page visit into token theft and command execution.