OpenClaw 0-Click Vulnerability Allows Malicious Websites to Hijack Developer AI Agents

**Executive Summary:** Oasis Security disclosed a critical zero‑interaction vulnerability in the OpenClaw AI agent that lets attacker-controlled websites open a localhost WebSocket, bypass rate limiting and authentication, auto-pair as a trusted device, and take admin control of the agent — enabling file exfiltration, command execution, and effective workstation compromise; a PoC was demonstrated and a patch (2026.2.25) has been released, but rapid adoption means unpatched instances are likely and immediate remediation is advised.