One Click to “God Mode”: The Critical OpenClaw Flaw That Handed Attackers Your Master Keys

A critical vulnerability in the OpenClaw (formerly Moltbot/ClawdBot) UI fails to validate gateway URL query strings, causing the browser to transmit a stored gateway token in the WebSocket payload; an attacker can steal that token via a crafted link or phishing page to gain administrative control and trigger remote code execution. The flaw was responsibly disclosed and patched in v2026.1.29; instances running v2026.1.28 or earlier should be upgraded immediately.