PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

1-Click RCE To Steal Your OpenClaw Data and Keys (CVE-2026-25253)

depthfirst.com | vulnerability | High | CVE-2026-25253 | #ai-security | #rce | #exploit-chain | #ai-assistant | #openclaw | #cve-2026-25253 | #token-exfiltration
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A 1-click RCE chain against OpenClaw, the open-source AI assistant: a gatewayUrl settings flaw plus a WebSocket pivot turn one malicious page visit into token theft and command execution.
CVE
CVE-2026-25253
CVSS
8.8
Published
Collected

Related coverage

High · vulnerability · hunt.io
Hunting OpenClaw Exposures: CVE-2026-25253 in Internet-Facing AI Agent Gateways
Hunt.io found over 17,500 exposed OpenClaw, Clawdbot and Moltbot instances vulnerable to CVE-2026-25253, which lets unauthenticated attackers read stored AI-service API tokens via /api/export-auth.
vulnerability · theori.io
Chaining N-days to Compromise All: Part 6 — Windows Kernel LPE: Get SYSTEM
Final part of the N-day chain series: how CVE-2023-36802, a type-confusion flaw in the mskssrv.sys driver, was analysed and exploited to raise VMware privileges to SYSTEM on the host.
vulnerability · theori.io
Chaining N-days to Compromise All: Part 3 — Windows Driver LPE: Medium to System
Part three of the N-day exploit chain series, covering a Windows driver privilege-escalation flaw used to move from medium-integrity access to SYSTEM in a full exploit chain.
vulnerability · swarm.ptsecurity.com
MyBB <= 1.8.31: Remote Code Execution Chain
A full exploit chain for MyBB <= 1.8.31: an SQL injection escalates to RCE when MyBB runs on PostgreSQL — pg_send_query allows stacked queries — with malicious templates executed by eval().
vulnerability · bishopfox.com
ColdFusion Bomb: A Chain Reaction From XSS to RCE
The technical companion to CVE-2015-0345: a DOM-based XSS in ColdFusion's admin panel chains into remote code execution by scheduling tasks and planting a CFML shell.
vulnerability · about.gitlab.com
Pillow CVE-2026-112900: How to find and fix it with GitLab
Upgrade to Pillow 13.0.0, then use dependency scanning, code search, and GitLab Duo Agent Platform to patch every affected Python project in your groups.
Back