CVE-2026-25253

CVE-2026-25253 affects OpenClaw (clawdbot/Moltbot) versions prior to 2026.1.29, allowing it to automatically establish a WebSocket connection to an attacker-controlled server and transmit a user token if a malicious gatewayUrl is present in a query string. This vulnerability carries a CVSSv3.1 score of 8.8 (HIGH), indicating a critical risk due to its network attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability, though user interaction is required. While there is no evidence of active exploitation (KEV) or public exploit code available, the vulnerability has garnered significant community and media attention, with discussions highlighting its potential for severe consequences like agent hijacking.