---
id: 5605
title: "One-click RCE on OpenClaw in under 2 hours with an Autonomous Hacking Agent"
source_domain: ethiack.com
source_url: "https://ethiack.com/info-hub/research/one-click-rce-openclaw"
published_at: "2026-01-29T00:00:00Z"
tags: ["ai-security", "rce", "zero-day", "account-takeover", "ai-pentesting", "openclaw", "ethiack"]
phying_url: "https://phying.com/item/5605"
lang: en
---

# One-click RCE on OpenClaw in under 2 hours with an Autonomous Hacking Agent

## Summary

Ethiack's Hackian agent found a one-click account-takeover-to-RCE chain in OpenClaw fully autonomously in under two hours, leaking the Gateway Control UI's auth token from an attacker-controlled site.

## Intelligence Metadata

- **Sources:** ethiack.com
- **Published:** 2026-01-29T00:00:00Z
- **Original:** https://ethiack.com/info-hub/research/one-click-rce-openclaw
- **Phying News:** https://phying.com/item/5605